URL: https://github.com/freeipa/freeipa/pull/468 Author: simo5 Title: #468: Remove non-sensical kdestroy on https stop Action: opened
PR body: """ This kdestroy runs as root and wipes root's own ccachs ... this is totally inappropriate. https://fedorahosted.org/freeipa/ticket/6673 Signed-off-by: Simo Sorce <s...@redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/468/head:pr468 git checkout pr468
From 9bb27c8f897458a5a2225da7a3faffe0d8be4eef Mon Sep 17 00:00:00 2001 From: Simo Sorce <s...@redhat.com> Date: Wed, 15 Feb 2017 04:44:59 -0500 Subject: [PATCH] Remove non-sensical kdestroy on https stop This kdestroy runs as root and wipes root's own ccachs ... this is totally inappropriate. https://fedorahosted.org/freeipa/ticket/6673 Signed-off-by: Simo Sorce <s...@redhat.com> --- install/share/ipa-httpd.conf.template | 1 - ipaplatform/redhat/tasks.py | 3 +-- 2 files changed, 1 insertion(+), 3 deletions(-) diff --git a/install/share/ipa-httpd.conf.template b/install/share/ipa-httpd.conf.template index a907d73..de8e88b 100644 --- a/install/share/ipa-httpd.conf.template +++ b/install/share/ipa-httpd.conf.template @@ -4,4 +4,3 @@ Environment=KRB5CCNAME=$KRB5CC_HTTPD Environment=KDCPROXY_CONFIG=$KDCPROXY_CONFIG ExecStartPre=$IPA_HTTPD_KDCPROXY -ExecStopPost=$POST diff --git a/ipaplatform/redhat/tasks.py b/ipaplatform/redhat/tasks.py index 9dd71b4..ea1abbf 100644 --- a/ipaplatform/redhat/tasks.py +++ b/ipaplatform/redhat/tasks.py @@ -451,8 +451,7 @@ def configure_httpd_service_ipa_conf(self): dict( KRB5CC_HTTPD=paths.KRB5CC_HTTPD, KDCPROXY_CONFIG=paths.KDCPROXY_CONFIG, - IPA_HTTPD_KDCPROXY=paths.IPA_HTTPD_KDCPROXY, - POST='-{kdestroy} -A'.format(kdestroy=paths.KDESTROY) + IPA_HTTPD_KDCPROXY=paths.IPA_HTTPD_KDCPROXY ) )
-- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
