[Freeipa-devel] [freeipa PR#468][comment] Remove non-sensical kdestroy on https stop

martbab freeipa-github-notification at redhat.com
Wed Feb 15 15:18:30 UTC 2017


  URL: https://github.com/freeipa/freeipa/pull/468
Title: #468: Remove non-sensical kdestroy on https stop

martbab commented:
"""
I would rather keep `kdestroy` there, but only really purge the apache ccache explicitly:

```diff
--- a/ipaplatform/redhat/tasks.py
+++ b/ipaplatform/redhat/tasks.py
@@ -452,7 +452,8 @@ class RedHatTaskNamespace(BaseTaskNamespace):
                 KRB5CC_HTTPD=paths.KRB5CC_HTTPD,
                 KDCPROXY_CONFIG=paths.KDCPROXY_CONFIG,
                 IPA_HTTPD_KDCPROXY=paths.IPA_HTTPD_KDCPROXY,
-                POST='-{kdestroy} -A'.format(kdestroy=paths.KDESTROY)
+                POST='-{kdestroy} -c {ccache}'.format(
+                    kdestroy=paths.KDESTROY, ccache=paths.KRB5CC_HTTPD)
             )
         )
```

Otherwise we will bump into regressions caused by stale HTTPD ccaches left over when backing up/restoring IPA installation. I would demonstrate it on a failing backup/restore tests but they are completely messed up right now.
"""

See the full comment at https://github.com/freeipa/freeipa/pull/468#issuecomment-280038786


More information about the Freeipa-devel mailing list