[Freeipa-devel] [PATCH] include kpasswd.keytab in replicas

Rob Crittenden rcritten at redhat.com
Wed Apr 9 18:46:49 UTC 2008


We discovered a problem when changing passwords on replicas. The problem 
was that kpasswd.keytab was being regenerated for each replica. This 
effectively made just the last replica made authoritative in setting 
passwords.

So the short-term fix is to include kpasswd.keytab in the replica file 
so we use the same one everywhere. Longer-term fix would be to create a 
separate entry for each replica to be able to change passwords.

rob

-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-790-kpasswd.patch
Type: text/x-patch
Size: 4054 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20080409/ec85bc76/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20080409/ec85bc76/attachment-0001.bin>


More information about the Freeipa-devel mailing list