From b8f304c66994ae82ea484a4e8bd057d4ccf1e6bd Mon Sep 17 00:00:00 2001 From: Simo Sorce Date: Wed, 15 Feb 2017 04:44:59 -0500 Subject: Remove non-sensical kdestroy on https stop This kdestroy runs as root and wipes root's own ccachs ... this is totally inappropriate. Use a file ccache that ends up in the private tmp, so that if the service is restarted the file is automatically removed. https://fedorahosted.org/freeipa/ticket/6673 Signed-off-by: Simo Sorce Reviewed-By: Martin Babinsky Reviewed-By: Martin Basti Reviewed-By: Christian Heimes --- ipaplatform/base/paths.py | 1 + 1 file changed, 1 insertion(+) (limited to 'ipaplatform/base') diff --git a/ipaplatform/base/paths.py b/ipaplatform/base/paths.py index 5d5fb993f..eb6e835f4 100644 --- a/ipaplatform/base/paths.py +++ b/ipaplatform/base/paths.py @@ -352,5 +352,6 @@ class BasePathNamespace(object): IPA_GETKEYTAB = '/usr/sbin/ipa-getkeytab' EXTERNAL_SCHEMA_DIR = '/usr/share/ipa/schema.d' GSSPROXY_CONF = '/etc/gssproxy/10-ipa.conf' + KRB5CC_HTTPD = '/tmp/krb5cc-httpd' path_namespace = BasePathNamespace -- cgit