[Freeipa-devel] [PATCH] include kpasswd.keytab in replicas

Rob Crittenden rcritten at redhat.com
Wed Apr 9 20:27:16 UTC 2008


Simo Sorce wrote:
> On Wed, 2008-04-09 at 14:46 -0400, Rob Crittenden wrote:
>> We discovered a problem when changing passwords on replicas. The
>> problem 
>> was that kpasswd.keytab was being regenerated for each replica. This 
>> effectively made just the last replica made authoritative in setting 
>> passwords.
>>
>> So the short-term fix is to include kpasswd.keytab in the replica
>> file 
>> so we use the same one everywhere. Longer-term fix would be to create
>> a 
>> separate entry for each replica to be able to change passwords.
> 
> ack
> 
> Simo.
> 

pushed
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20080409/d042ab2e/attachment.bin>


More information about the Freeipa-devel mailing list