diff options
| author | Simo Sorce <simo@redhat.com> | 2017-02-15 04:44:59 -0500 |
|---|---|---|
| committer | Martin Babinsky <mbabinsk@redhat.com> | 2017-02-22 15:50:48 +0100 |
| commit | b8f304c66994ae82ea484a4e8bd057d4ccf1e6bd (patch) | |
| tree | 41f957ba47758aeebc936770828494e99a59200d /ipaplatform/redhat | |
| parent | 2747f2ad782c7640ecc6949098f0d43411182255 (diff) | |
| download | freeipa-b8f304c66994ae82ea484a4e8bd057d4ccf1e6bd.tar.gz freeipa-b8f304c66994ae82ea484a4e8bd057d4ccf1e6bd.tar.xz freeipa-b8f304c66994ae82ea484a4e8bd057d4ccf1e6bd.zip | |
Remove non-sensical kdestroy on https stop
This kdestroy runs as root and wipes root's own ccachs ...
this is totally inappropriate.
Use a file ccache that ends up in the private tmp, so that if the
service is restarted the file is automatically removed.
https://fedorahosted.org/freeipa/ticket/6673
Signed-off-by: Simo Sorce <simo@redhat.com>
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
Reviewed-By: Martin Basti <mbasti@redhat.com>
Reviewed-By: Christian Heimes <cheimes@redhat.com>
Diffstat (limited to 'ipaplatform/redhat')
| -rw-r--r-- | ipaplatform/redhat/tasks.py | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/ipaplatform/redhat/tasks.py b/ipaplatform/redhat/tasks.py index 5bddd1469..123595eb8 100644 --- a/ipaplatform/redhat/tasks.py +++ b/ipaplatform/redhat/tasks.py @@ -458,7 +458,7 @@ class RedHatTaskNamespace(BaseTaskNamespace): dict( KDCPROXY_CONFIG=paths.KDCPROXY_CONFIG, IPA_HTTPD_KDCPROXY=paths.IPA_HTTPD_KDCPROXY, - POST='-{kdestroy} -A'.format(kdestroy=paths.KDESTROY) + KRB5CC_HTTPD=paths.KRB5CC_HTTPD, ) ) |