[Freeipa-devel] [PATCH] 77 Update krbtpolicy doc to inform that restarting krb5kdc might be needed.
David O'Brien
davido at redhat.com
Tue Feb 8 04:36:24 UTC 2011
Dmitri Pal wrote:
> On 02/07/2011 06:46 PM, David O'Brien wrote:
>> Jenny Galipeau wrote:
>>> Pavel Zuna wrote:
>>>> It seems that restarting krb5kdc is only needed when changes to the
>>>> global policy are made. Per-user policies take effect immediately
>>>> for newly requested tickets. Can someone please confirm?
>>> Yes, in testing this is the behavior. If the help could specify that
>>> a ipactl restart is required after global policy change, that would
>>> be great.
>>> Thanks
>>> Jenny
>>>
>> Please raise a suitable bugzilla to get this included in the user doc.
>> So far I only have doc about restarting IPA services after ipa
>> krbtpolicy-reset.
>
> Isn't it the same thing?
I took "changes" to mean using krbtpolicy-mod and any others, not just
-reset, which is the info I received last time.
>
>> thanks
>>>> Fix #844
>>>>
>>>> Pavel
>>>> ------------------------------------------------------------------------
>>>>
>>>>
>>>> _______________________________________________
>>>> Freeipa-devel mailing list
>>>> Freeipa-devel at redhat.com
>>>> https://www.redhat.com/mailman/listinfo/freeipa-devel
>>>
>>
>
>
--
David O'Brien
Red Hat Asia Pacific Pty Ltd
+61 7 3514 8189
"He who asks is a fool for five minutes, but he who does not ask remains
a fool forever."
~ Chinese proverb
More information about the Freeipa-devel
mailing list