documentation about realm
On fresh install, enable Realm with the following options doesn't work :
--foreman-proxy-realm=true \ --foreman-proxy-realm-principal="myuser@$KERBEROS_REALM" \ --foreman-proxy-realm-provider=freeipa
The smartproxy will start and will not find the keytab file, so this feature will be disabled. Still during installer run the call of refresh features on the proxy will have as answer that realm is not enabled and the installer will fail.
Workaround : The keytab must be present at the expected location (/etc/foreman-proxy/freeipa.keytab by default) before running the installer.
#2 Updated by Ewoud Kohl van Wijngaarden 3 months ago
- Triaged changed from No to Yes
- Status changed from New to Need more information
- Category set to Foreman modules
I think from the installers perspective this is correct: it made the changes as expected, but then discovered it didn't work and correctly failed on it. I'm not entirely sure what else you expected. The workaround you mentioned is the correct solution.