diff options
author | Simo Sorce <simo@redhat.com> | 2014-12-16 14:47:42 -0500 |
---|---|---|
committer | Martin Kosek <mkosek@redhat.com> | 2015-01-08 15:54:36 +0100 |
commit | 4f1fdc8f70c1efdb6c6074181d3ecbcb45df001e (patch) | |
tree | c0aaf0f61e4eaf620df4a092a16cc1ad3beb72d2 | |
parent | 730b472db123e97a0c158b626e9f7c3f0b13e2ca (diff) | |
download | freeipa-4f1fdc8f70c1efdb6c6074181d3ecbcb45df001e.tar.gz freeipa-4f1fdc8f70c1efdb6c6074181d3ecbcb45df001e.tar.xz freeipa-4f1fdc8f70c1efdb6c6074181d3ecbcb45df001e.zip |
Remove the removal of the ccache
It is not necessary to remove the ccache on upgrades on modern IPA
servers, even if the ccache contains stale data either it is re-initialized by
mod_auth_kerb or a new ccache collection is created (if completely unrelated
credentials were present), at least when using DIR or keyring ccaches.
This line causes wrong SELinux labels to be set in the kernel keyring on
uprades, which the cause the apache server to fail to use th ccache.
https://fedorahosted.org/freeipa/ticket/4815
Reviewed-By: Martin Kosek <mkosek@redhat.com>
-rwxr-xr-x[-rw-r--r--] | install/tools/ipa-upgradeconfig | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/install/tools/ipa-upgradeconfig b/install/tools/ipa-upgradeconfig index c25ab5431..71fe5195d 100644..100755 --- a/install/tools/ipa-upgradeconfig +++ b/install/tools/ipa-upgradeconfig @@ -1337,7 +1337,6 @@ def main(): fstore.restore_file(removed_sysconfig_file) http = httpinstance.HTTPInstance(fstore) - http.remove_httpd_ccache() http.configure_selinux_for_httpd() http.change_mod_nss_port_from_http() |