diff options
author | Martin Babinsky <mbabinsk@redhat.com> | 2015-04-15 15:20:00 +0200 |
---|---|---|
committer | Tomas Babej <tbabej@redhat.com> | 2015-04-24 15:56:12 +0200 |
commit | 528e9503ed71c7d4b5231689ceb8bb37901efced (patch) | |
tree | f8dd9edd9db410109642a9e5e21fd5492e83e878 /daemons/dnssec/ipa-dnskeysyncd | |
parent | 2c8c4b8c885fe34cc722cce91639230a7734c3f3 (diff) | |
download | freeipa-528e9503ed71c7d4b5231689ceb8bb37901efced.tar.gz freeipa-528e9503ed71c7d4b5231689ceb8bb37901efced.tar.xz freeipa-528e9503ed71c7d4b5231689ceb8bb37901efced.zip |
use separate ccache filename for each IPA DNSSEC daemon
ipa-dnskeysyncd, ipa-dnskeysync-replica, and ipa-ods-exporter use a generic
'ccache' filename for credential storage, making debugging Kerberos-related
errors unnecessarily complicated. This patch renames the ccache files so that
each of these daemons now has its own credenital cache.
Reviewed-By: Petr Spacek <pspacek@redhat.com>
Diffstat (limited to 'daemons/dnssec/ipa-dnskeysyncd')
-rwxr-xr-x | daemons/dnssec/ipa-dnskeysyncd | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/daemons/dnssec/ipa-dnskeysyncd b/daemons/dnssec/ipa-dnskeysyncd index b17c8d94e..398f00762 100755 --- a/daemons/dnssec/ipa-dnskeysyncd +++ b/daemons/dnssec/ipa-dnskeysyncd @@ -65,7 +65,7 @@ log = root_logger # Kerberos initialization PRINCIPAL = str('%s/%s' % (DAEMONNAME, api.env.host)) log.debug('Kerberos principal: %s', PRINCIPAL) -ccache_filename = os.path.join(WORKDIR, 'ccache') +ccache_filename = os.path.join(WORKDIR, 'ipa-dnskeysyncd.ccache') ipautil.kinit_keytab(PRINCIPAL, KEYTAB_FB, ccache_filename) os.environ['KRB5CCNAME'] = ccache_filename |