FreeIPA Flaw Chain Lets Anonymous Clients Create Reusable Administrator Credentials
FreeIPA and 389 Directory Server flaws let an anonymous client create an attacker-chosen Kerberos identity in the administrators group.
More info