Using FreeIPA Server V2 and began testing against CentOS6 since it has a better support for SSSD. Ran into an issue with importing a Kerberos keytab to the new host and the FreeIPA folks indicated this is a known bug that was fixed in RHEL5.6: http://rhn.redhat.com/errata/RHBA-2011-0832.html The new IPA client is ipa-client-2.0-10.el5_6.1. Any idea when this will make it into the CentOS6 repo? David