diff options
| author | Rob Crittenden <rcritten@redhat.com> | 2012-02-15 17:06:54 +0100 |
|---|---|---|
| committer | Martin Kosek <mkosek@redhat.com> | 2012-02-15 17:08:33 +0100 |
| commit | 2da6d6e7460b932f406b7f0632320433f9f98a85 (patch) | |
| tree | b48904578e589bfc942bd1f7150a57fd61e718c6 /freeipa.spec.in | |
| parent | 95b1848f199a8f17936faac921d7b9495f90645b (diff) | |
| download | freeipa-2da6d6e7460b932f406b7f0632320433f9f98a85.tar.gz freeipa-2da6d6e7460b932f406b7f0632320433f9f98a85.tar.xz freeipa-2da6d6e7460b932f406b7f0632320433f9f98a85.zip | |
Don't set delegation flag in client, we're using S4U2Proxy now
A forwardable ticket is still required but we no longer need to send
the TGT to the IPA server. A new flag, --delegate, is available if
the old behavior is required.
Set the minimum n-v-r for mod_auth_kerb and krb5-server to pick up
needed patches for S4U2Proxy to work.
https://fedorahosted.org/freeipa/ticket/1098
https://fedorahosted.org/freeipa/ticket/2246
Diffstat (limited to 'freeipa.spec.in')
| -rw-r--r-- | freeipa.spec.in | 13 |
1 files changed, 6 insertions, 7 deletions
diff --git a/freeipa.spec.in b/freeipa.spec.in index 198f4a423..541dbeb6e 100644 --- a/freeipa.spec.in +++ b/freeipa.spec.in @@ -93,17 +93,13 @@ Requires(pre): 389-ds-base >= 1.2.10-0.5.a5 Requires: openldap-clients Requires: nss Requires: nss-tools -%if 0%{?fedora} >= 16 -Requires: krb5-server >= 1.9.1-15 -%else -Requires: krb5-server -%endif +Requires: krb5-server >= 1.9.2-6 Requires: krb5-pkinit-openssl Requires: cyrus-sasl-gssapi%{?_isa} Requires: ntp Requires: httpd Requires: mod_wsgi -Requires: mod_auth_kerb >= 5.4-9 +Requires: mod_auth_kerb >= 5.4-8 Requires: mod_nss >= 1.0.8-10 Requires: python-ldap Requires: python-krbV @@ -672,8 +668,11 @@ fi %ghost %attr(0644,root,apache) %config(noreplace) %{_sysconfdir}/ipa/ca.crt %changelog +* Tue Jan 31 2012 Rob Crittenden <rcritten@redhat.com> - 2.99.0-15 +- Set min for krb5-server to 1.9.2-6 to pick up needed s4u2proxy patches + * Wed Jan 11 2012 Rob Crittenden <rcritten@redhat.com> - 2.99.0-14 -- Set min for mod_auth_kerb to 5.4-9 to pick up s4u2proxy support +- Set min for mod_auth_kerb to 5.4-8 to pick up s4u2proxy support * Fri Dec 9 2011 Alexander Bokovoy <abokovoy@redhat.com> - 2.99.0-13 - Fix dependency for samba4-devel package |