summaryrefslogtreecommitdiffstats
path: root/install/tools/ipa-upgradeconfig
diff options
context:
space:
mode:
authorRob Crittenden <rcritten@redhat.com>2013-05-07 10:33:55 -0400
committerMartin Kosek <mkosek@redhat.com>2013-05-09 09:15:47 +0200
commit13cef6cac4c7f6c53e9fcfea97c5e830c8c69826 (patch)
treeb8192ba463dc1e9b1a3bf5e39e073bd417ab69dc /install/tools/ipa-upgradeconfig
parent8f6e6514c443dcc69fecdda548737f5c135156f4 (diff)
downloadfreeipa-13cef6cac4c7f6c53e9fcfea97c5e830c8c69826.tar.gz
freeipa-13cef6cac4c7f6c53e9fcfea97c5e830c8c69826.tar.xz
freeipa-13cef6cac4c7f6c53e9fcfea97c5e830c8c69826.zip
Set KRB5CCNAME so httpd s4u2proxy can with with newer krb5-server
The DIR ccache format is now the default in krb5-server 1.11.2-4 but /run/user/<uid> isn't created for Apache by anything so it has no ccache (and it doesn't have SELinux permissions to write here either). Use KRB5CCNAME to set a file path instead in /etc/sysconfig/httpd. https://fedorahosted.org/freeipa/ticket/3607
Diffstat (limited to 'install/tools/ipa-upgradeconfig')
-rw-r--r--install/tools/ipa-upgradeconfig1
1 files changed, 1 insertions, 0 deletions
diff --git a/install/tools/ipa-upgradeconfig b/install/tools/ipa-upgradeconfig
index c9574b961..8fa9b189a 100644
--- a/install/tools/ipa-upgradeconfig
+++ b/install/tools/ipa-upgradeconfig
@@ -916,6 +916,7 @@ def main():
http = httpinstance.HTTPInstance(fstore)
http.remove_httpd_ccache()
http.configure_selinux_for_httpd()
+ http.configure_httpd_ccache()
ds = dsinstance.DsInstance()