[Freeipa-users] user keytab retrieval

[Stijn De Weirdt]

hi all,

(this is IPA 4.4.0-14.el7.centos.4)

i'm a bit puzzled by the following: i want to retrieve a user keytab
using ipa-getkeytab -r (since the keytab for the same user was already
retrieved on another host).

when doing so, i get

Failed to parse result: Insufficient access rights

however, i can get the keytab without the -r option.

anyone care to explain what access rights are required (or why this
error occurs)?


many thanks,

stijn