From 13cef6cac4c7f6c53e9fcfea97c5e830c8c69826 Mon Sep 17 00:00:00 2001
From: Rob Crittenden <rcritten@redhat.com>
Date: Tue, 7 May 2013 10:33:55 -0400
Subject: Set KRB5CCNAME so httpd s4u2proxy can with with newer krb5-server

The DIR ccache format is now the default in krb5-server 1.11.2-4
but /run/user/<uid> isn't created for Apache by anything so it
has no ccache (and it doesn't have SELinux permissions to write here
either).

Use KRB5CCNAME to set a file path instead in /etc/sysconfig/httpd.

https://fedorahosted.org/freeipa/ticket/3607
---
 install/tools/ipa-upgradeconfig | 1 +
 1 file changed, 1 insertion(+)

(limited to 'install/tools/ipa-upgradeconfig')

diff --git a/install/tools/ipa-upgradeconfig b/install/tools/ipa-upgradeconfig
index c9574b961..8fa9b189a 100644
--- a/install/tools/ipa-upgradeconfig
+++ b/install/tools/ipa-upgradeconfig
@@ -916,6 +916,7 @@ def main():
     http = httpinstance.HTTPInstance(fstore)
     http.remove_httpd_ccache()
     http.configure_selinux_for_httpd()
+    http.configure_httpd_ccache()
 
     ds = dsinstance.DsInstance()
 
-- 
cgit