diff options
| author | Rob Crittenden <rcritten@redhat.com> | 2010-04-01 11:44:58 -0400 |
|---|---|---|
| committer | Rob Crittenden <rcritten@redhat.com> | 2010-04-01 11:58:09 -0400 |
| commit | 525a335b736a1d5206659b080b2c71440f5c3b3f (patch) | |
| tree | ddac5d458116d88fdede57cc18eeb22c084ec008 /ipa-python/freeipa-python.spec | |
| parent | 3c11b71aa7169615ecb74ac0b3b513e44662c52a (diff) | |
| download | freeipa-525a335b736a1d5206659b080b2c71440f5c3b3f.tar.gz freeipa-525a335b736a1d5206659b080b2c71440f5c3b3f.tar.xz freeipa-525a335b736a1d5206659b080b2c71440f5c3b3f.zip | |
handle kdb stash being a keytab
In krb5 1.7 and later, the stash file (/var/kerberos/krb5kdc/.k5.$REALM
on Fedora) is created in the regular keytab format instead of the older
less-portable one. Based from comments and code in kt_file.c, here's a
change to try to recognize that case (the file starts with a magic
number) and read the master key from Python.
The KDC will still read either format, so I left the bits that set
things up on replicas alone (advice appreciated). The patch works as
expected on my 64-bit box, both on RHEL5 (krb5 1.6.1 with a traditional
stash file) and on Raw Hide (krb5 1.7 with a keytab).
Backported from IPA v2 patch submitted by Nalin Dahyabhai <nalin@redhat.com>
Diffstat (limited to 'ipa-python/freeipa-python.spec')
0 files changed, 0 insertions, 0 deletions