I’m looking for a solution where I can get retrieve one users keytab to several ipa-clients.

Tried with ipa-getkeytab first, but previous keytab seems to become invalid. (running ipa-client 3.x from RHEL6 and ipa-server 4.5 (rhel7)).

Does anyone have a suggestion on how we accomplish this, without introducing scp of the keytab file between hosts?

Hampus