URL:
https://github.com/freeipa/freeipa/pull/804
Title: #804: krb5: make sure KDC certificate is readable
HonzaCholasta commented:
"""
I have already "solved" this by changing the permissions of the cert file in the
`renew_kdc_cert` restart script. Your solution is definitely better, please remove the
chmod call from `renew_kdc_cert`.
"""
See the full comment at
https://github.com/freeipa/freeipa/pull/804#issuecomment-303295791