diff options
| author | Martin Babinsky <mbabinsk@redhat.com> | 2015-04-28 16:24:02 +0200 |
|---|---|---|
| committer | Petr Vobornik <pvoborni@redhat.com> | 2015-05-12 13:01:45 +0200 |
| commit | 9a1a409d63e30dcb939b672d352fc4aa7ba690fe (patch) | |
| tree | d1968511607679ab2bd6730fd643cc856ab341c7 /init | |
| parent | 57fba7a56f88c517b3ebb03842f1cc18bc129ebb (diff) | |
| download | freeipa-9a1a409d63e30dcb939b672d352fc4aa7ba690fe.tar.gz freeipa-9a1a409d63e30dcb939b672d352fc4aa7ba690fe.tar.xz freeipa-9a1a409d63e30dcb939b672d352fc4aa7ba690fe.zip | |
provide dedicated ccache file for httpd
httpd service stores Kerberos credentials in kernel keyring which gets
destroyed and recreated during service install/upgrade, causing problems when
the process is run under SELinux context other than 'unconfined_t'. This patch
enables HTTPInstance to set up a dedicated CCache file for Apache to store
credentials.
https://fedorahosted.org/freeipa/ticket/4973
Reviewed-By: Jan Cholasta <jcholast@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
Diffstat (limited to 'init')
| -rw-r--r-- | init/systemd/httpd.service | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/init/systemd/httpd.service b/init/systemd/httpd.service new file mode 100644 index 000000000..ef1e6bfda --- /dev/null +++ b/init/systemd/httpd.service @@ -0,0 +1,4 @@ +.include /usr/lib/systemd/system/httpd.service + +[Service] +Environment=KRB5CCNAME=/var/run/httpd/krbcache/krb5ccache |