17.3. Re-enrolling a client by using the client keytab: Non-interactive re-enrollment

Procedure

1. Re-create the client machine with the same host name.

2. Copy the keytab file from the backup location to the re-created client machine, for example its /tmp/ directory.

   重要

   Do not put the keytab in the /etc/krb5.keytab file as old keys are removed from this location during the execution of the ipa-client-install installation script.

3. Use the ipa-client-install utility to re-enroll the client. Specify the keytab location with the --keytab option:

   # ipa-client-install --keytab /tmp/krb5.keytab

   注記

   The keytab specified in the --keytab option is only used when authenticating to initiate the re-enrollment. During the re-enrollment, IdM generates a new keytab for the client.