If it's already supposed to be done, that explains why I couldn't find any instructions for doing it. Thank you for this detail.
Regarding the principal : -------------------------------------- [abx-master@ipa-01.internal.domain.org ~]$ kinit admin Password for admin@INTERNAL.DOMAIN.ORG: [abx-master@ipa-01.internal.domain.org ~]$ ipa service-show nfs/nas.domain.tld Principal name: nfs/nas.domain.tld@INTERNAL.DOMAIN.ORG Principal alias: nfs/nas.domain.tld@INTERNAL.DOMAIN.ORG Keytab: True Managed by: nas.domain.tld [abx-master@ipa-01.internal.domain.org ~]$ --------------------------------------
I haven't tried setting the PAC type manually yet, as if that should already be done, I guess I forgot something.
Regards, Julien Fremont