1 story taggedFreeIPA.
A two-flaw chain in Red Hat's identity system allows an anonymous client to create a Kerberos account and land in the administrators group.