What were you trying to do that didn't work?
When the customer is trying to introduce RAIDUS integration into their FIPS-enabled IPA environment, after setting radius_md5_fips_override = true in their Kerberos configuration IPA no longer will start.
Please provide the package NVR for which bug is seen:
- ipa-server-4.9.11-6.module+el8.8.0+19022+e8902f4b.x86_64
- freeradius-3.0.20-14.module+el8.8.0+17558+3f8a93b9.x86_64
How reproducible:
I don't have the ability to reproduce the issue myself, so I'm unable to confirm the existence of this defect.
Steps to reproduce
- Install RHEL with FIPS mode enabled.
- Install and configure IPA.
- Follow this KCS: https://access.redhat.com/solutions/4650511
Expected results
IPA starts with RADIUS enabled.
Actual results
IPA fails to start.