[Freeipa-devel] [PATCH] 439 Allow kernel keyring CCACHE when supported

[Petr Viktorin]

On 11/29/2013 01:48 PM, Martin Kosek wrote:
> On 11/19/2013 12:35 PM, Petr Viktorin wrote:
>> On 11/05/2013 07:22 PM, Martin Kosek wrote:
>>> Server and client installer should allow kernel keyring ccache when
>>> supported.

>>
>> How do I enable the kernel keyring? On f20 I get this:
>>
>> 2013-11-19T11:28:07Z DEBUG Starting external process
>> 2013-11-19T11:28:07Z DEBUG args=keyctl get_persistent @s 0
>> 2013-11-19T11:28:07Z DEBUG Process finished, return code=1
>> 2013-11-19T11:28:07Z DEBUG stdout=
>> 2013-11-19T11:28:07Z DEBUG stderr=keyctl_get_persistent: Key has been revoked
>
> It should be enabled out of the box. But there were some initial issues with
> persistent keyring in the first versions of kernel with a support, hopefully
> this was just a fluke which disappeared.
>
> This is what I see on my F20 with kernel-3.11.9-300.fc20.x86_64:
>
> # keyctl get_persistent @s 0
> 637466038

With kernel-3.11.10-300.fc20.x86_64, I get an error again:
$ keyctl get_persistent @s 0
keyctl_get_persistent: Key has been revoked

I don't know much about the kernel keyring, so I'm lost as to what the 
message is trying to tell me.

-- 
Petr³