[Freeipa-devel] [PATCH] 068 Connection check program for replica installation

Rob Crittenden rcritten at redhat.com
Mon May 23 20:41:02 UTC 2011


Martin Kosek wrote:
> This is a first version of connection checking program for replica
> installation. See patch for program purpose description. Currently,
> there is no man pages for the program.
>
> Note to Simo and Rob: I use password for logging as admin. Btw would it
> be safe to have an admin keytab in the replica file? Replica file
> contents are lying freely in /tmp after the replica installation.
>
> Martin

nack, you aren't including the new binary in the spec.

You should also:

- set KRB5CCNAME to a temporary ccache and remove that when the install 
exists (successful or not)
- remove the temporary krb5.conf you create
- be a bit more explicit what we are doing, at least more than "Run 
connection check to master".
- yes, we should remove the replica file contents

rob




More information about the Freeipa-devel mailing list