summaryrefslogtreecommitdiffstats
path: root/install/tools/ipa-upgradeconfig
diff options
context:
space:
mode:
authorSimo Sorce <simo@redhat.com>2014-12-16 14:47:42 -0500
committerMartin Kosek <mkosek@redhat.com>2015-01-08 15:54:36 +0100
commit4f1fdc8f70c1efdb6c6074181d3ecbcb45df001e (patch)
treec0aaf0f61e4eaf620df4a092a16cc1ad3beb72d2 /install/tools/ipa-upgradeconfig
parent730b472db123e97a0c158b626e9f7c3f0b13e2ca (diff)
downloadfreeipa-4f1fdc8f70c1efdb6c6074181d3ecbcb45df001e.tar.gz
freeipa-4f1fdc8f70c1efdb6c6074181d3ecbcb45df001e.tar.xz
freeipa-4f1fdc8f70c1efdb6c6074181d3ecbcb45df001e.zip
Remove the removal of the ccache
It is not necessary to remove the ccache on upgrades on modern IPA servers, even if the ccache contains stale data either it is re-initialized by mod_auth_kerb or a new ccache collection is created (if completely unrelated credentials were present), at least when using DIR or keyring ccaches. This line causes wrong SELinux labels to be set in the kernel keyring on uprades, which the cause the apache server to fail to use th ccache. https://fedorahosted.org/freeipa/ticket/4815 Reviewed-By: Martin Kosek <mkosek@redhat.com>
Diffstat (limited to 'install/tools/ipa-upgradeconfig')
-rwxr-xr-x[-rw-r--r--]install/tools/ipa-upgradeconfig1
1 files changed, 0 insertions, 1 deletions
diff --git a/install/tools/ipa-upgradeconfig b/install/tools/ipa-upgradeconfig
index c25ab5431..71fe5195d 100644..100755
--- a/install/tools/ipa-upgradeconfig
+++ b/install/tools/ipa-upgradeconfig
@@ -1337,7 +1337,6 @@ def main():
fstore.restore_file(removed_sysconfig_file)
http = httpinstance.HTTPInstance(fstore)
- http.remove_httpd_ccache()
http.configure_selinux_for_httpd()
http.change_mod_nss_port_from_http()