[Freeipa-users] HostEnrol role does not seem to work

[Qing Chang]

I assigned an IPA user account the "HostEnrol" role and run "ipa-client-install",
when it got to this "User authorized to enroll computers:", I used that account,
then got following:
Joining realm failed: No permission to join this host to the IPA domain.
Installation failed. Rolling back changes.
IPA client is not configured on this system.

Am I missing something here?

Thanks,

Qing