adcli attempting to modify userAccountControl during TGT update
Submitted by Luke Bigum
Assigned to Stef Walter
Description
adcli appears to be trying to update the userAccountControl when doing a kerberos ticket renewal, or "adcli update". While it doesn't appear to cause anything to fail, I don't think it should be trying to do this.
[root@localhost ~]# adcli update -D example.com -N bigumlvm -S dc.example.com -v ...
- Password not too old, no change needed
- Modifying computer account: userAccountControl ! Couldn't set userAccountControl on computer account: CN=bigumlvm,CN=Computers,DC=example,DC=com: Insufficient access
- Updated existing computer account: CN=bigumlvm,CN=Computers,DC=example,DC=com