Issue

• I was trying for some time to follow the instructions from the manual to manually configure a system to be a IdM client.
• The IdM server is a RHEL 7.0 server, the client is a RHEL 6.5 system. The keytab was exported on the RHEL 7 IdM server and copied to the RHEL 6.5 system.
• It never worked. I compared this new system with an existing RHEL 6 system and noticed that there was a difference in the keytab in some of the encryption types.
• So I tried to export the keytab on this particular client after installing the ipa-admintools. I copied the keytab and installed it on the target machine, restarted sssd and it instantly worked.
• So I assume that you need to export the keytab on a machine with the same major RHEL release, or provide some other information (arguments) to create a valid keytab for use on a machine with another major release.