[Freeipa-devel] [PATCH] include kpasswd.keytab in replicas

Simo Sorce ssorce at redhat.com
Wed Apr 9 18:49:53 UTC 2008


On Wed, 2008-04-09 at 14:46 -0400, Rob Crittenden wrote:
> We discovered a problem when changing passwords on replicas. The
> problem 
> was that kpasswd.keytab was being regenerated for each replica. This 
> effectively made just the last replica made authoritative in setting 
> passwords.
> 
> So the short-term fix is to include kpasswd.keytab in the replica
> file 
> so we use the same one everywhere. Longer-term fix would be to create
> a 
> separate entry for each replica to be able to change passwords.

ack

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York




More information about the Freeipa-devel mailing list