[Freeipa-devel] [PATCH] 502 hosts can fetch keytabs
Rob Crittenden
rcritten at redhat.com
Fri Aug 6 02:50:39 UTC 2010
Enable a host to retrieve a keytab for all its services.
Using the host service principal one should be able to retrieve a keytab
for other services for the host using ipa-getkeytab. This required a
number of changes:
- allow hosts in the service's managedby to write krbPrincipalKey
- automatically add the host to managedby when a service is created
- fix ipa-getkeytab to return the entire prinicpal and not just the
first data element. It was returning "host" from the service tgt
and not host/ipa.example.com
- fix the display of the managedby attribute in the service plugin
This led to a number of changes in the service unit tests. I took the
opportunity to switch to the Declarative scheme and tripled the number
of tests we were doing. This shed some light on a few bugs in the plugin:
- if a service had a bad usercertificate it was impossible to delete the
service. I made it a bit more flexible.
- I added a summary for the mod and find commands
- has_keytab wasn't being set in the find output
This is for ticket 68
rob
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-502-service.patch
Type: application/mbox
Size: 24551 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20100805/ad668fe6/attachment.mbox>
More information about the Freeipa-devel
mailing list