summaryrefslogtreecommitdiffstats
path: root/ipa-client
diff options
context:
space:
mode:
authorMartin Kosek <mkosek@redhat.com>2013-11-29 13:29:20 +0100
committerPetr Viktorin <pviktori@redhat.com>2013-12-09 12:21:22 +0100
commit9677308caa78ed722570aea32f21334b8c27bad3 (patch)
treec0725324e5347b7f00cae94528932211f9fba39c /ipa-client
parentb6540e88d88470f6566507e442f521214c5a74dc (diff)
downloadfreeipa-9677308caa78ed722570aea32f21334b8c27bad3.tar.gz
freeipa-9677308caa78ed722570aea32f21334b8c27bad3.tar.xz
freeipa-9677308caa78ed722570aea32f21334b8c27bad3.zip
Allow kernel keyring CCACHE when supported
Server and client installer should allow kernel keyring ccache when supported. https://fedorahosted.org/freeipa/ticket/4013
Diffstat (limited to 'ipa-client')
-rwxr-xr-xipa-client/ipa-install/ipa-client-install7
1 files changed, 7 insertions, 0 deletions
diff --git a/ipa-client/ipa-install/ipa-client-install b/ipa-client/ipa-install/ipa-client-install
index c74e6840c..0b9c6e98e 100755
--- a/ipa-client/ipa-install/ipa-client-install
+++ b/ipa-client/ipa-install/ipa-client-install
@@ -44,6 +44,7 @@ try:
realm_to_suffix)
import ipapython.services as ipaservices
from ipapython import ipautil, sysrestore, version, certmonger, ipaldap
+ from ipapython import kernel_keyring
from ipapython.config import IPAOptionParser
from ipalib import api, errors
from ipalib import x509
@@ -952,6 +953,12 @@ def configure_krb5_conf(cli_realm, cli_domain, cli_server, cli_kdc, dnsok,
libopts.append({'name':'ticket_lifetime', 'type':'option', 'value':'24h'})
libopts.append({'name':'forwardable', 'type':'option', 'value':'yes'})
+ # Configure KEYRING CCACHE if supported
+ if kernel_keyring.is_persistent_keyring_supported():
+ root_logger.debug("Enabling persistent keyring CCACHE")
+ libopts.append({'name':'default_ccache_name', 'type':'option',
+ 'value':'KEYRING:persistent:%{uid}'})
+
opts.append({'name':'libdefaults', 'type':'section', 'value':libopts})
opts.append({'name':'empty', 'type':'empty'})