Description of problem:

Attempting to create a new host in Satellite 6.18.1 linked to FreeIPA / IdM realm results in "Failed to create pcs1.jbho.me's realm entry: ERF12-5287 [ProxyAPI::ProxyException]: Unable to create realm entry ([RestClient::BadRequest]: 400 Bad Request) for Capsule https://satellite.jbho.me:9090/realm/JBHO.ME" in web UI.

How reproducible:

Always

Is this issue a regression from an earlier version:

Yes

Steps to Reproduce:

1. Install Satellite, make Sat server an IdM client, prepare realm integration via `foreman-prepare-realm` per documentation.

2. Enter new host details in web UI, including appropriate realm.

3. Click submit, get the above error message.

Actual behavior:

New host entry fails to save with above error message in a web banner.

Expected behavior:

Host entry should save normally.

Business Impact / Additional info:

Debug logs show the following:

2025-11-28T08:34:28 e7e8ee6f [I] Started POST /realm/JBHO.ME/
2025-11-28T08:34:28 e7e8ee6f [D] verifying remote client 10.1.0.10 against trusted_hosts ["satellite.jbho.me"]
2025-11-28T08:34:28 e7e8ee6f [D] freeipa: uri is https://ipapmx2.jbho.me/ipa/xml
2025-11-28T08:34:28 e7e8ee6f [D] freeipa: realm JBHO.ME
2025-11-28T08:34:28 e7e8ee6f [D] Making IPA call: ["host_show", ["pcs1.jbho.me"]]
2025-11-28T08:34:28 e7e8ee6f [D] Requesting credentials for Kerberos principal sat-realm@JBHO.ME using keytab /etc/foreman-proxy/freeipa.keyta
b
2025-11-28T08:34:28 e7e8ee6f [E] Failed to initialise credential cache from keytab
2025-11-28T08:34:28 e7e8ee6f [W] Error details for Failed to initialise credential cache from keytab: <Kerberos::Krb5::Exception>: krb5_get_in
it_creds_keytab: Generic error (see e-text)
/usr/share/foreman-proxy/lib/proxy/kerberos.rb:10:in `get_init_creds_keytab'
/usr/share/foreman-proxy/lib/proxy/kerberos.rb:10:in `init_krb5_ccache'
/usr/share/foreman-proxy/modules/realm_freeipa/provider.rb:29:in `configure_ipa'
/usr/share/foreman-proxy/modules/realm_freeipa/provider.rb:24:in `ipa'
/usr/share/foreman-proxy/modules/realm_freeipa/provider.rb:152:in `ipa_call'
/usr/share/foreman-proxy/modules/realm_freeipa/provider.rb:60:in `find'
/usr/share/foreman-proxy/modules/realm_freeipa/provider.rb:75:in `create'
/usr/share/foreman-proxy/modules/realm/realm_api.rb:13:in `block in <class:Api>'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1697:in `call'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1697:in `block in compile!'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1030:in `block (3 levels) in route!'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1049:in `route_eval'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1030:in `block (2 levels) in route!'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1078:in `block in process_route'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1076:in `catch'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1076:in `process_route'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1028:in `block in route!'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1025:in `each'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1025:in `route!'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1147:in `block in dispatch!'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1119:in `block in invoke'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1119:in `catch'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1119:in `invoke'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1142:in `dispatch!'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:956:in `block in call!'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1119:in `block in invoke'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1119:in `catch'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1119:in `invoke'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:956:in `call!'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:945:in `call'
/usr/share/foreman-proxy/lib/proxy/hsts_middleware.rb:12:in `call'
/usr/share/foreman-proxy/lib/proxy/log.rb:102:in `call'
/usr/share/foreman-proxy/lib/proxy/request_id_middleware.rb:11:in `call'
/usr/share/gems/gems/rack-protection-2.2.4/lib/rack/protection/xss_header.rb:18:in `call'
/usr/share/gems/gems/rack-protection-2.2.4/lib/rack/protection/path_traversal.rb:16:in `call'
/usr/share/gems/gems/rack-protection-2.2.4/lib/rack/protection/json_csrf.rb:26:in `call'
/usr/share/gems/gems/rack-protection-2.2.4/lib/rack/protection/base.rb:50:in `call'
/usr/share/gems/gems/rack-protection-2.2.4/lib/rack/protection/base.rb:50:in `call'
/usr/share/gems/gems/rack-protection-2.2.4/lib/rack/protection/frame_options.rb:31:in `call'
/usr/share/gems/gems/rack-2.2.20/lib/rack/null_logger.rb:11:in `call'
/usr/share/gems/gems/rack-2.2.20/lib/rack/head.rb:12:in `call'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/show_exceptions.rb:22:in `call'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:218:in `call'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:2004:in `call'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1564:in `block in call'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1780:in `synchronize'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1564:in `call'
/usr/share/gems/gems/rack-2.2.20/lib/rack/urlmap.rb:74:in `block in call'
/usr/share/gems/gems/rack-2.2.20/lib/rack/urlmap.rb:58:in `each'
/usr/share/gems/gems/rack-2.2.20/lib/rack/urlmap.rb:58:in `call'
/usr/share/gems/gems/rack-2.2.20/lib/rack/builder.rb:244:in `call'
/usr/share/gems/gems/rack-2.2.20/lib/rack/handler/webrick.rb:95:in `service'
/usr/share/gems/gems/webrick-1.9.1/lib/webrick/httpserver.rb:140:in `service'
/usr/share/gems/gems/webrick-1.9.1/lib/webrick/httpserver.rb:96:in `run'
/usr/share/gems/gems/webrick-1.9.1/lib/webrick/server.rb:310:in `block in start_thread'
/usr/share/gems/gems/logging-2.4.0/lib/logging/diagnostic_context.rb:474:in `block in create_with_logging_context'
2025-11-28T08:34:28 e7e8ee6f [E] Failed to initailize credentials cache from keytab: krb5_get_init_creds_keytab: Generic error (see e-text): <RuntimeError>: Failed to initailize credentials cache from keytab: krb5_get_init_creds_keytab: Generic error (see e-text)
/usr/share/foreman-proxy/lib/proxy/kerberos.rb:13:in `rescue in init_krb5_ccache'
/usr/share/foreman-proxy/lib/proxy/kerberos.rb:9:in `init_krb5_ccache'
/usr/share/foreman-proxy/modules/realm_freeipa/provider.rb:29:in `configure_ipa'
/usr/share/foreman-proxy/modules/realm_freeipa/provider.rb:24:in `ipa'
/usr/share/foreman-proxy/modules/realm_freeipa/provider.rb:152:in `ipa_call'
/usr/share/foreman-proxy/modules/realm_freeipa/provider.rb:60:in `find'
/usr/share/foreman-proxy/modules/realm_freeipa/provider.rb:75:in `create'
/usr/share/foreman-proxy/modules/realm/realm_api.rb:13:in `block in <class:Api>'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1697:in `call'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1697:in `block in compile!'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1030:in `block (3 levels) in route!'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1049:in `route_eval'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1030:in `block (2 levels) in route!'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1078:in `block in process_route'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1076:in `catch'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1076:in `process_route'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1028:in `block in route!'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1025:in `each'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1025:in `route!'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1147:in `block in dispatch!'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1119:in `block in invoke'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1119:in `catch'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1119:in `invoke'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1142:in `dispatch!'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:956:in `block in call!'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1119:in `block in invoke'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1119:in `catch'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1119:in `invoke'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:956:in `call!'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:945:in `call'
/usr/share/foreman-proxy/lib/proxy/hsts_middleware.rb:12:in `call'
/usr/share/foreman-proxy/lib/proxy/log.rb:102:in `call'
/usr/share/foreman-proxy/lib/proxy/request_id_middleware.rb:11:in `call'
/usr/share/gems/gems/rack-protection-2.2.4/lib/rack/protection/xss_header.rb:18:in `call'
/usr/share/gems/gems/rack-protection-2.2.4/lib/rack/protection/path_traversal.rb:16:in `call'
/usr/share/gems/gems/rack-protection-2.2.4/lib/rack/protection/json_csrf.rb:26:in `call'
/usr/share/gems/gems/rack-protection-2.2.4/lib/rack/protection/base.rb:50:in `call'
/usr/share/gems/gems/rack-protection-2.2.4/lib/rack/protection/base.rb:50:in `call'
/usr/share/gems/gems/rack-protection-2.2.4/lib/rack/protection/frame_options.rb:31:in `call'
/usr/share/gems/gems/rack-2.2.20/lib/rack/null_logger.rb:11:in `call'
/usr/share/gems/gems/rack-2.2.20/lib/rack/head.rb:12:in `call'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/show_exceptions.rb:22:in `call'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:218:in `call'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:2004:in `call'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1564:in `block in call'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1780:in `synchronize'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1564:in `call'
/usr/share/gems/gems/rack-2.2.20/lib/rack/urlmap.rb:74:in `block in call'
/usr/share/gems/gems/rack-2.2.20/lib/rack/urlmap.rb:58:in `each'
/usr/share/gems/gems/rack-2.2.20/lib/rack/urlmap.rb:58:in `call'
/usr/share/gems/gems/rack-2.2.20/lib/rack/builder.rb:244:in `call'
/usr/share/gems/gems/rack-2.2.20/lib/rack/handler/webrick.rb:95:in `service'
/usr/share/gems/gems/webrick-1.9.1/lib/webrick/httpserver.rb:140:in `service'
/usr/share/gems/gems/webrick-1.9.1/lib/webrick/httpserver.rb:96:in `run'
/usr/share/gems/gems/webrick-1.9.1/lib/webrick/server.rb:310:in `block in start_thread'
/usr/share/gems/gems/logging-2.4.0/lib/logging/diagnostic_context.rb:474:in `block in create_with_logging_context'
2025-11-28T08:34:28 e7e8ee6f [W] Failed to initailize credentials cache from keytab: krb5_get_init_creds_keytab: Generic error (see e-text): <RuntimeError>: Failed to initailize credentials cache from keytab: krb5_get_init_creds_keytab: Generic error (see e-text)
/usr/share/foreman-proxy/lib/proxy/kerberos.rb:13:in `rescue in init_krb5_ccache'
/usr/share/foreman-proxy/lib/proxy/kerberos.rb:9:in `init_krb5_ccache'
/usr/share/foreman-proxy/modules/realm_freeipa/provider.rb:29:in `configure_ipa'
/usr/share/foreman-proxy/modules/realm_freeipa/provider.rb:24:in `ipa'
/usr/share/foreman-proxy/modules/realm_freeipa/provider.rb:152:in `ipa_call'
/usr/share/foreman-proxy/modules/realm_freeipa/provider.rb:60:in `find'
/usr/share/foreman-proxy/modules/realm_freeipa/provider.rb:75:in `create'
/usr/share/foreman-proxy/modules/realm/realm_api.rb:13:in `block in <class:Api>'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1697:in `call'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1697:in `block in compile!'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1030:in `block (3 levels) in route!'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1049:in `route_eval'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1030:in `block (2 levels) in route!'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1078:in `block in process_route'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1076:in `catch'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1076:in `process_route'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1028:in `block in route!'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1025:in `each'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1025:in `route!'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1147:in `block in dispatch!'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1119:in `block in invoke'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1119:in `catch'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1119:in `invoke'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1142:in `dispatch!'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:956:in `block in call!'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1119:in `block in invoke'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1119:in `catch'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1119:in `invoke'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:956:in `call!'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:945:in `call'
/usr/share/foreman-proxy/lib/proxy/hsts_middleware.rb:12:in `call'
/usr/share/foreman-proxy/lib/proxy/log.rb:102:in `call'
/usr/share/foreman-proxy/lib/proxy/request_id_middleware.rb:11:in `call'
/usr/share/gems/gems/rack-protection-2.2.4/lib/rack/protection/xss_header.rb:18:in `call'
/usr/share/gems/gems/rack-protection-2.2.4/lib/rack/protection/path_traversal.rb:16:in `call'
/usr/share/gems/gems/rack-protection-2.2.4/lib/rack/protection/json_csrf.rb:26:in `call'
/usr/share/gems/gems/rack-protection-2.2.4/lib/rack/protection/base.rb:50:in `call'
/usr/share/gems/gems/rack-protection-2.2.4/lib/rack/protection/base.rb:50:in `call'
/usr/share/gems/gems/rack-protection-2.2.4/lib/rack/protection/frame_options.rb:31:in `call'
/usr/share/gems/gems/rack-2.2.20/lib/rack/null_logger.rb:11:in `call'
/usr/share/gems/gems/rack-2.2.20/lib/rack/head.rb:12:in `call'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/show_exceptions.rb:22:in `call'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:218:in `call'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:2004:in `call'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1564:in `block in call'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1780:in `synchronize'
/usr/share/gems/gems/sinatra-2.2.4/lib/sinatra/base.rb:1564:in `call'
/usr/share/gems/gems/rack-2.2.20/lib/rack/urlmap.rb:74:in `block in call'
/usr/share/gems/gems/rack-2.2.20/lib/rack/urlmap.rb:58:in `each'
/usr/share/gems/gems/rack-2.2.20/lib/rack/urlmap.rb:58:in `call'
/usr/share/gems/gems/rack-2.2.20/lib/rack/builder.rb:244:in `call'
/usr/share/gems/gems/rack-2.2.20/lib/rack/handler/webrick.rb:95:in `service'
/usr/share/gems/gems/webrick-1.9.1/lib/webrick/httpserver.rb:140:in `service'
/usr/share/gems/gems/webrick-1.9.1/lib/webrick/httpserver.rb:96:in `run'
/usr/share/gems/gems/webrick-1.9.1/lib/webrick/server.rb:310:in `block in start_thread'
/usr/share/gems/gems/logging-2.4.0/lib/logging/diagnostic_context.rb:474:in `block in create_with_logging_context'
2025-11-28T08:34:28 e7e8ee6f [I] Finished POST /realm/JBHO.ME/ with 400 (28.93 ms)
2025-11-28T08:34:28  [D] close: 10.1.0.10:59800