On 10.9.2013 21:12, Simo Sorce wrote: > I think the attached (untested) patch should solve the issue. > > Is it sufficient or do we want to change framework code somehow ? > > Simo. > I think no changes to the framework are necessary. It already adds krbTicketPolicyAux when krbTicketFlags is touched in host-add and host-mod. Honza -- Jan Cholasta