[Freeipa-devel] [PATCH] 407 Set KRB5CCNAME so that dirsrv can work with newer krb5-server

[Martin Kosek]

The DIR ccache format is now the default in krb5-server 1.11.2-4
but /run/user/<uid> isn't created for Apache by anything so it
has no ccache (and it doesn't have SELinux permissions to write here
either).

Use KRB5CCNAME to set a file path instead in /etc/sysconfig/dirsrv.

https://fedorahosted.org/freeipa/ticket/3628

----

Without this patch, replication on F19 is broken.

Martin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mkosek-407-set-krb5ccname-so-that-dirsrv-can-work-with-newer-kr.patch
Type: text/x-patch
Size: 3014 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20130514/6abfda25/attachment.bin>