diff options
| author | Petr Viktorin <pviktori@redhat.com> | 2012-09-06 03:52:20 -0400 |
|---|---|---|
| committer | Rob Crittenden <rcritten@redhat.com> | 2012-09-10 23:20:15 -0400 |
| commit | 1f831393a24c0c3c7df50c4327395f1197f485e5 (patch) | |
| tree | 63d861e6ec16feb73574e206dcdd576c86a24a76 /install | |
| parent | a4ab88445c122837597d88fe68ce5b944f5324bb (diff) | |
| download | freeipa.git-1f831393a24c0c3c7df50c4327395f1197f485e5.tar.gz freeipa.git-1f831393a24c0c3c7df50c4327395f1197f485e5.tar.xz freeipa.git-1f831393a24c0c3c7df50c4327395f1197f485e5.zip | |
ipa-client-install: Obtain host TGT from one specific KDC
When clients install, they use kinit to obtain a TGT, which uses DNS to find
the KDC to connect to. It might happen that the newly created principal
has not replicated to selected KDC yet, making kinit fail and aborting the
install.
The client sets a temporary krb5 config file while installing via $KRB5_CONFIG.
Modify this file so that the kerberos library only uses the specific server
we're installing under, and call kinit while it's still in place.
Clean up the configure_krb5_conf function to remove unused arguments. For
clarity, use keyword arguments when calling it.
https://fedorahosted.org/freeipa/ticket/2982
Diffstat (limited to 'install')
0 files changed, 0 insertions, 0 deletions