summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorSimo Sorce <ssorce@redhat.com>2011-01-19 14:08:48 -0500
committerSimo Sorce <ssorce@redhat.com>2011-01-20 15:49:30 -0500
commit5af80a7583edfd0061a70abde4868d4582247608 (patch)
treed05ea550e593d9260cfad928f7ea9376fc18b1a7
parentb9ad279ad2d8d93dd501115a028783cf8fe7fcbd (diff)
downloadfreeipa-5af80a7583edfd0061a70abde4868d4582247608.tar.gz
freeipa-5af80a7583edfd0061a70abde4868d4582247608.tar.xz
freeipa-5af80a7583edfd0061a70abde4868d4582247608.zip
Make krb5kdc use the ldapi socket to talk to dirsrv
Fixes: https://fedorahosted.org/freeipa/ticket/812
-rw-r--r--install/share/krb5.conf.template2
-rw-r--r--ipaserver/install/krbinstance.py2
2 files changed, 3 insertions, 1 deletions
diff --git a/install/share/krb5.conf.template b/install/share/krb5.conf.template
index ab569714b..9cf4ee84d 100644
--- a/install/share/krb5.conf.template
+++ b/install/share/krb5.conf.template
@@ -34,7 +34,7 @@
[dbmodules]
$REALM = {
db_library = kldap
- ldap_servers = ldap://127.0.0.1/
+ ldap_servers = ldapi://%2fvar%2frun%2fslapd-$SERVER_ID.socket
ldap_kerberos_container_dn = cn=kerberos,$SUFFIX
ldap_kdc_dn = uid=kdc,cn=sysaccounts,cn=etc,$SUFFIX
ldap_kadmind_dn = uid=kdc,cn=sysaccounts,cn=etc,$SUFFIX
diff --git a/ipaserver/install/krbinstance.py b/ipaserver/install/krbinstance.py
index e7c111637..9f706797f 100644
--- a/ipaserver/install/krbinstance.py
+++ b/ipaserver/install/krbinstance.py
@@ -35,6 +35,7 @@ from ipalib import errors
from ipaserver import ipaldap
from ipaserver.install import replication
+from ipaserver.install.dsinstance import realm_to_serverid
import ldap
from ldap import LDAPError
@@ -255,6 +256,7 @@ class KrbInstance(service.Service):
SUFFIX=self.suffix,
DOMAIN=self.domain,
HOST=self.host,
+ SERVER_ID=realm_to_serverid(self.realm),
REALM=self.realm)
def __configure_sasl_mappings(self):