Changeset 1716 for trunk/server/fedora/config

Timestamp:

Oct 30, 2010, 3:07:34 AM (14 years ago)

Author:

geofft

Message:

Have slapd use a file ccache instead of a memory one

I suspect this will work around some bugs in the GSSAPI- /
Kerberos-handling code. If KRB5CCNAME is set and valid, slapd
will use that instead of making its own ccache.

Location:

trunk/server/fedora/config/etc

Files:

• cron.d/slapdagent (added)
• sysconfig/dirsrv (modified) (1 diff)

trunk/server/fedora/config/etc/sysconfig/dirsrv

@@ -29 +29 @@
 KRB5_KTNAME=/etc/dirsrv/keytab ; export KRB5_KTNAME
 
+# Use a disk ccache instead of a memory one (this is renewed by the
+# slapdagent cronjob) -- geofft 30 October 2010
+KRB5CCNAME=/var/run/dirsrv/krb5cc; export KRB5CCNAME
+/usr/kerberos/bin/kinit -k -t "$KRB5_KTNAME" ldap/"$(hostname)"
+chown --reference="$KRB5_KTNAME" "$KRB5CCNAME"
+
 # other environment settings can be added here too
 OS=`uname -s`