diff options
author | Nalin Dahyabhai <nalin@redhat.com> | 2009-11-24 12:04:58 -0500 |
---|---|---|
committer | Simo Sorce <ssorce@redhat.com> | 2009-11-24 12:07:27 -0500 |
commit | a094dfa91c88c1bd594b9fc29c8ba3639d3b3e90 (patch) | |
tree | 959ef9c97149c3eb81ee0460c4adbfc42fbf0ec8 /ipa.spec.in | |
parent | 5d2bbf53256c212ad26505bae6827f6739c73f22 (diff) | |
download | freeipa-a094dfa91c88c1bd594b9fc29c8ba3639d3b3e90.tar.gz freeipa-a094dfa91c88c1bd594b9fc29c8ba3639d3b3e90.tar.xz freeipa-a094dfa91c88c1bd594b9fc29c8ba3639d3b3e90.zip |
Add code to handle stash files using keytab format
In krb5 1.7 and later, the stash file (/var/kerberos/krb5kdc/.k5.$REALM
on Fedora) is created in the regular keytab format instead of the older
less-portable one. Based from comments and code in kt_file.c, here's a
change to try to recognize that case (the file starts with a magic
number) and read the master key from Python.
The KDC will still read either format, so I left the bits that set
things up on replicas alone (advice appreciated). The patch works as
expected on my 64-bit box, both on RHEL5 (krb5 1.6.1 with a traditional
stash file) and on Raw Hide (krb5 1.7 with a keytab).
Diffstat (limited to 'ipa.spec.in')
0 files changed, 0 insertions, 0 deletions