[Freeipa-devel] [PATCH] 439 Allow kernel keyring CCACHE when supported

[Martin Kosek]

On 11/19/2013 12:35 PM, Petr Viktorin wrote:
> On 11/05/2013 07:22 PM, Martin Kosek wrote:
>> Server and client installer should allow kernel keyring ccache when
>> supported.
> 
> The patch needs a rebase.

Rebased.

> 
> Can you add a function to check if persistent key is supported? It would remove
> some code duplication.

Makes sense, this will make the code prettier. Fixed.

> 
> How do I enable the kernel keyring? On f20 I get this:
> 
> 2013-11-19T11:28:07Z DEBUG Starting external process
> 2013-11-19T11:28:07Z DEBUG args=keyctl get_persistent @s 0
> 2013-11-19T11:28:07Z DEBUG Process finished, return code=1
> 2013-11-19T11:28:07Z DEBUG stdout=
> 2013-11-19T11:28:07Z DEBUG stderr=keyctl_get_persistent: Key has been revoked

It should be enabled out of the box. But there were some initial issues with
persistent keyring in the first versions of kernel with a support, hopefully
this was just a fluke which disappeared.

This is what I see on my F20 with kernel-3.11.9-300.fc20.x86_64:

# keyctl get_persistent @s 0
637466038

Martin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mkosek-439-2-allow-kernel-keyring-ccache-when-supported.patch
Type: text/x-patch
Size: 4770 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20131129/1f696370/attachment.bin>