diff options
| author | Rob Crittenden <rcritten@redhat.com> | 2013-05-07 10:33:55 -0400 |
|---|---|---|
| committer | Martin Kosek <mkosek@redhat.com> | 2013-05-09 09:15:47 +0200 |
| commit | 13cef6cac4c7f6c53e9fcfea97c5e830c8c69826 (patch) | |
| tree | b8192ba463dc1e9b1a3bf5e39e073bd417ab69dc /install | |
| parent | 8f6e6514c443dcc69fecdda548737f5c135156f4 (diff) | |
| download | freeipa-13cef6cac4c7f6c53e9fcfea97c5e830c8c69826.tar.gz freeipa-13cef6cac4c7f6c53e9fcfea97c5e830c8c69826.tar.xz freeipa-13cef6cac4c7f6c53e9fcfea97c5e830c8c69826.zip | |
Set KRB5CCNAME so httpd s4u2proxy can with with newer krb5-server
The DIR ccache format is now the default in krb5-server 1.11.2-4
but /run/user/<uid> isn't created for Apache by anything so it
has no ccache (and it doesn't have SELinux permissions to write here
either).
Use KRB5CCNAME to set a file path instead in /etc/sysconfig/httpd.
https://fedorahosted.org/freeipa/ticket/3607
Diffstat (limited to 'install')
| -rw-r--r-- | install/tools/ipa-upgradeconfig | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/install/tools/ipa-upgradeconfig b/install/tools/ipa-upgradeconfig index c9574b961..8fa9b189a 100644 --- a/install/tools/ipa-upgradeconfig +++ b/install/tools/ipa-upgradeconfig @@ -916,6 +916,7 @@ def main(): http = httpinstance.HTTPInstance(fstore) http.remove_httpd_ccache() http.configure_selinux_for_httpd() + http.configure_httpd_ccache() ds = dsinstance.DsInstance() |