<html> <head> <meta content="text/html; charset=UTF-8" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> Simo, Have added the following into bugzilla .. <a class="bz_bug_link bz_status_NEW " title="NEW - Unable to add principle via kadmin.local to IPA v3" href="https://bugzilla.redhat.com/show_bug.cgi?id=1035494">Bug 1035494</a> has been added to the database seems strange but whilst listprincs/getprinc works getpols and the addprinc (at least in this use case) doesnt... ie kadmin.local: add_principal -pw XXXXXXX krbtgt/OLD-REALM@IPA-REALM WARNING: no policy specified for krbtgt/OLD-REALM@IPA-REALM; defaulting to no policy add_principal: Invalid argument while creating "krbtgt/OLD-REALM@IPA-REALM". kadmin.local: listpols get_policies: Plugin does not support the operation while retrieving list. rgds Matt B. <div class="moz-cite-prefix">On 11/27/2013 11:05 PM, Simo Sorce wrote: </div> <blockquote cite="mid:1385557516.22025.80.camel@willson.li.ssimo.org" type="cite"> <pre wrap="">On Wed, 2013-11-27 at 15:24 +1000, Matt Bryant wrote: </pre> <blockquote type="cite"> <pre wrap="">Hmm just upgraded to 3 so thought I woudl give it a go ... but (aint there always one of those :() can't seem to add the principle .. kadmin.local: add_principal krbtgt/OLD-REALM@IPA-REALM WARNING: no policy specified for krbtgt/OLD-REALM@IPA-REALM; defaulting to no policy Enter password for principal "krbtgt/OLD-REALM@IPA-REALM": Re-enter password for principal "krbtgt/OLD-REALM@IPA-REALM": add_principal: Invalid argument while creating "krbtgt/OLD-REALM@IPA-REALM". and nothing was placed in the kadmin log .. :( </pre> </blockquote> <pre wrap=""> This is almost certainly a bug, can you open a ticket so we can investigate ? Simo. </pre> </blockquote> </body> </html>