https://bugzilla.redhat.com/show_bug.cgi?id=800119 (Red Hat Enterprise Linux 6)
Description of problem: You should not be allowed to run host-disable on an IPA server, because it will Disable the Kerberos key, SSL certificate and all services for the IPA Server. # ipa host-disable `hostname` ipa: ERROR: no modifications to be performed # ipa user-find ipa: ERROR: Kerberos error: ('Unspecified GSS failure. Minor code may provide more information', 851968)/('KDC has no support for encryption type', -1765328370) Version-Release number of selected component (if applicable): ipa-server-2.2.0-103.20120302T0507zgitc611d89.el6.x86_64 How reproducible: always Steps to Reproduce: 1. see description 2. 3. Actual results: Expected results: Additional info:
master: 35521ad[[BR]] ipa-2-2: 133a0f0
Re-opened, failing to prevent disabling DNS and dogtagldap services.
Caused by missing comma in list of services.
attachment freeipa-rcrit-1004-disable.patch
master: 7e26517[[BR]] ipa-2-2: 06e4b4a
Metadata Update from @rcritten: - Issue assigned to rcritten - Issue set to the milestone: FreeIPA 2.2 Core Effort - 2012/04
Login to comment on this ticket.