12.2. Removing a Kerberos principal alias

Procedure

• To remove the alias useralias from the account user, enter:

  # ipa user-remove-principal <user> <useralias>
  --------------------------------
  Removed aliases from user "user"
  --------------------------------
    User login: user
    Principal alias: user@IDM.EXAMPLE.COM

  To remove an alias from a host or service, use the ipa host-remove-principal or ipa service-remove-principal command respectively instead.

  Note that you cannot remove the canonical principal name:

  # ipa user-show <user>
    User login: user
    ...
    Principal name: user@IDM.EXAMPLE.COM
    ...
  
  # ipa user-remove-principal user user
  ipa: ERROR: invalid 'krbprincipalname': at least one value equal to the canonical principal name must be present