[Freeipa-devel] [PATCH 0031] provide a dedicated ccache file to httpd

Anthony Messina amessina at messinet.com
Wed May 13 11:44:05 UTC 2015


On Wednesday, May 13, 2015 01:28:44 PM Martin Babinsky wrote:
> On 05/12/2015 06:47 PM, Alexander Bokovoy wrote:
> > On Tue, 12 May 2015, Petr Vobornik wrote:
> >> On 05/12/2015 11:22 AM, Alexander Bokovoy wrote:
> >>> On Tue, 12 May 2015, Martin Babinsky wrote:
> >>>>>> %attr(644,root,root) %{_unitdir}/ipa-ods-exporter.service
> >>>>>> +%attr(644,root,root) %{etc_systemd_dir}/httpd.service
> >>>>> 
> >>>>> There is a minor issue: a lack of
> >>>>> 
> >>>>> Requires: /etc/systemd/system
> >>>>> 
> >>>>> which is needed because of /etc/systemd/system directory owned by a
> >>>>> different package. We require systemd-units which is provided by
> >>>>> systemd
> >>>>> package as well so it is sort of mitigated by that but it would
> >>>>> good to be explicit in the require. And yes, you can require the
> >>>>> directory because systemd provides it:
> >>>>> 
> >>>>> $ rpm -q --whatprovides /etc/systemd/system
> >>>>> systemd-219-13.fc22.x86_64
> >>>>> 
> >>>>> Otherwise, ACK.
> >>>> 
> >>>> thank for review Alexander, attaching updated patch.
> >>> 
> >>> ACK
> >> 
> >> Pushed to master: 9a1a409d63e30dcb939b672d352fc4aa7ba690fe
> > 
> > We also need a tmpfiles config changes because otherwise
> > /var/run/httpd/krbcache does not exist.
> > 
> > Patch attached.
> 
> ACK

I'm not sure it matters, but mod_auth_kerb already sets up 
/var/run/httpd/krbcache via /lib/tmpfiles.d/httpd-krbcache.conf:
d /var/run/httpd/krbcache 0700 apache apache

-- 
Anthony - https://messinet.com/ - https://messinet.com/~amessina/gallery
8F89 5E72 8DF0 BCF0 10BE 9967 92DC 35DC B001 4A4E
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: This is a digitally signed message part.
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20150513/8d7de12b/attachment.sig>


More information about the Freeipa-devel mailing list