[Freeipa-devel] [freeipa PR#468][comment] Remove non-sensical kdestroy on https stop
martbab
freeipa-github-notification at redhat.com
Wed Feb 15 15:18:30 UTC 2017
URL: https://github.com/freeipa/freeipa/pull/468
Title: #468: Remove non-sensical kdestroy on https stop
martbab commented:
"""
I would rather keep `kdestroy` there, but only really purge the apache ccache explicitly:
```diff
--- a/ipaplatform/redhat/tasks.py
+++ b/ipaplatform/redhat/tasks.py
@@ -452,7 +452,8 @@ class RedHatTaskNamespace(BaseTaskNamespace):
KRB5CC_HTTPD=paths.KRB5CC_HTTPD,
KDCPROXY_CONFIG=paths.KDCPROXY_CONFIG,
IPA_HTTPD_KDCPROXY=paths.IPA_HTTPD_KDCPROXY,
- POST='-{kdestroy} -A'.format(kdestroy=paths.KDESTROY)
+ POST='-{kdestroy} -c {ccache}'.format(
+ kdestroy=paths.KDESTROY, ccache=paths.KRB5CC_HTTPD)
)
)
```
Otherwise we will bump into regressions caused by stale HTTPD ccaches left over when backing up/restoring IPA installation. I would demonstrate it on a failing backup/restore tests but they are completely messed up right now.
"""
See the full comment at https://github.com/freeipa/freeipa/pull/468#issuecomment-280038786
More information about the Freeipa-devel
mailing list