diff options
| author | Simo Sorce <simo@redhat.com> | 2017-02-15 04:44:59 -0500 |
|---|---|---|
| committer | Martin Babinsky <mbabinsk@redhat.com> | 2017-02-22 15:50:48 +0100 |
| commit | b8f304c66994ae82ea484a4e8bd057d4ccf1e6bd (patch) | |
| tree | 41f957ba47758aeebc936770828494e99a59200d /install/share/ipa-httpd.conf.template | |
| parent | 2747f2ad782c7640ecc6949098f0d43411182255 (diff) | |
| download | freeipa-b8f304c66994ae82ea484a4e8bd057d4ccf1e6bd.tar.gz freeipa-b8f304c66994ae82ea484a4e8bd057d4ccf1e6bd.tar.xz freeipa-b8f304c66994ae82ea484a4e8bd057d4ccf1e6bd.zip | |
Remove non-sensical kdestroy on https stop
This kdestroy runs as root and wipes root's own ccachs ...
this is totally inappropriate.
Use a file ccache that ends up in the private tmp, so that if the
service is restarted the file is automatically removed.
https://fedorahosted.org/freeipa/ticket/6673
Signed-off-by: Simo Sorce <simo@redhat.com>
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
Reviewed-By: Martin Basti <mbasti@redhat.com>
Reviewed-By: Christian Heimes <cheimes@redhat.com>
Diffstat (limited to 'install/share/ipa-httpd.conf.template')
| -rw-r--r-- | install/share/ipa-httpd.conf.template | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/install/share/ipa-httpd.conf.template b/install/share/ipa-httpd.conf.template index 8822066ba..39bcfcca7 100644 --- a/install/share/ipa-httpd.conf.template +++ b/install/share/ipa-httpd.conf.template @@ -1,7 +1,7 @@ # Do not edit. Created by IPA installer. [Service] +Environment=KRB5CCNAME=$KRB5CC_HTTPD Environment=GSS_USE_PROXY=yes Environment=KDCPROXY_CONFIG=$KDCPROXY_CONFIG ExecStartPre=$IPA_HTTPD_KDCPROXY -ExecStopPost=$POST |