Running the ipa command line tools fails with "IPA client is not configured on this system" if the user is mapped to user_u:user_r:user_t:s0

Solution Unverified - Updated 2024-06-14T14:15:52+00:00 -

Issue

If the ipa client is launched by a user in the user_u SELinux user context ( id -Z is user_u:user_r:user_t:s0), ipa does not work

Running the ipa command fails with:

$ id -Z
user_u:user_r:user_t:s0
$ ipa user-find
IPA client is not configured on this system

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.