12.4. Removing a Kerberos enterprise principal alias

Procedure

• To remove the enterprise principal alias user@example.com from the account user, enter:

  # ipa user-remove-principal <user> <user\\@example.com>
  --------------------------------
  Removed aliases from user "user"
  --------------------------------
    User login: user
    Principal alias: user@IDM.EXAMPLE.COM

  To remove an alias from a host or service, use the ipa host-remove-principal or ipa service-remove-principal command respectively instead.

  注意

  When adding or removing enterprise principal aliases, escape the @ symbol using two backslashes (\\). Otherwise, the shell interprets the @ symbol as part of the Kerberos realm name and leads to the following error:

  ipa: ERROR: The realm for the principal does not match the realm for this IPA server