Thanks @SanderSteffann and @SanderSteffann for you answers. I am ok, that I can use the ipa-client-install --uninstall to uninstall
But what if i don't want to re-enroll it ? sometimes, you just clone a vm for testing then delet. My concern: Is there a way to force a verification between the system hostname and the keytab’s principal? For example, if the hostname doesn't match the principal in the keytab, it should fail to connect or authenticate. Without the need to re-enroll the vm On Windows AD, if I am not wrong, when you clone and rename a vm, you cannot reconnect using the old name. Best regards, -- _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
