[Freeipa-devel] [PATCH] 941 fix replica s4u2proxy delegation

Martin Kosek mkosek at redhat.com
Wed Feb 15 16:33:39 UTC 2012


On Wed, 2012-02-15 at 11:30 +0100, Martin Kosek wrote:
> On Mon, 2012-02-06 at 15:12 -0500, Rob Crittenden wrote:
> > Replicas weren't being added to the S4U2Proxy configuration so weren't 
> > allowed to delegate tickets. This fixes things.
> > 
> > rob
> 
> This would work fine for new replicas which adds replica-s4u2proxy.ldif
> but what about upgrading the current ones?
> 
> I am not sure that 30-s4u2proxy.update would add their principals to
> s4u2proxy configuration.
> 
> Martin
> 

Discussed with Rob, it is really an issue. He plans to deal with it in
another ticket.

In that case its ACK. Pushed to master, ipa-2-2.

Martin




More information about the Freeipa-devel mailing list