diff options
| author | Martin Babinsky <mbabinsk@redhat.com> | 2015-05-15 15:37:05 +0200 |
|---|---|---|
| committer | Jan Cholasta <jcholast@redhat.com> | 2015-05-19 12:59:18 +0000 |
| commit | 7ff7b1f533cc10c44acf6020b545b253de1ad37b (patch) | |
| tree | e0dbc79f162350c4652bd6a247c1c302820e37cc /init/systemd | |
| parent | 0167919ba88ef718e7b678380ebfe3ddb4566831 (diff) | |
| download | freeipa-7ff7b1f533cc10c44acf6020b545b253de1ad37b.tar.gz freeipa-7ff7b1f533cc10c44acf6020b545b253de1ad37b.tar.xz freeipa-7ff7b1f533cc10c44acf6020b545b253de1ad37b.zip | |
move IPA-related http runtime directories to common subdirectory
When both 'mod_auth_kerb' and 'mod_auth_gssapi' are installed at the same
time, they use common directory for storing Apache ccache file. Uninstallation
of 'mod_auth_kerb' removes this directory leading to invalid CCache path for
httpd and authentication failure.
Using an IPA-specific directory for credential storage during apache runtime
avoids this issue.
https://fedorahosted.org/freeipa/ticket/4973
Reviewed-By: David Kupka <dkupka@redhat.com>
Diffstat (limited to 'init/systemd')
| -rw-r--r-- | init/systemd/httpd.service | 2 | ||||
| -rw-r--r-- | init/systemd/ipa.conf.tmpfiles | 4 |
2 files changed, 4 insertions, 2 deletions
diff --git a/init/systemd/httpd.service b/init/systemd/httpd.service index ef1e6bfda..231f86f44 100644 --- a/init/systemd/httpd.service +++ b/init/systemd/httpd.service @@ -1,4 +1,4 @@ .include /usr/lib/systemd/system/httpd.service [Service] -Environment=KRB5CCNAME=/var/run/httpd/krbcache/krb5ccache +Environment=KRB5CCNAME=/var/run/httpd/ipa/krbcache/krb5ccache diff --git a/init/systemd/ipa.conf.tmpfiles b/init/systemd/ipa.conf.tmpfiles index b4503cc67..6eab2621c 100644 --- a/init/systemd/ipa.conf.tmpfiles +++ b/init/systemd/ipa.conf.tmpfiles @@ -1,3 +1,5 @@ d /var/run/ipa_memcached 0700 apache apache d /var/run/ipa 0700 root root -d /var/run/httpd/clientcaches 0700 apache apache +d /var/run/httpd/ipa 0700 apache apache +d /var/run/httpd/ipa/clientcaches 0700 apache apache +d /var/run/httpd/ipa/krbcache 0700 apache apache |