[PATCHES] Use ipachangeconf in the upgrade script
by Jakub Hrozek
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
[PATCH 1/2] Add Simo's ipachangeconf
This patch adds the ipachangeconf class from FreeIPA and packages it in
makefile and with python setuptools
[PATCH 2/2] Change the upgrade script to use ipachangeconf
With this patch, the upgrade script we use for changing the config files
is able to keep ordering and comments.
Fixes: #249
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAksB5/4ACgkQHsardTLnvCUldACfRNgjEW9aWboF9Jv7RKKTA+ws
Ys0AoOBp+s1K6pNmVPrBHgHUonT0It2m
=ekhm
-----END PGP SIGNATURE-----
14 years, 5 months
krb5 ticket renewal via gnome-screensaver not working
by Brian J. Murrell
I've got SSSD 0.7.1 installed on a laptop here for my wife. She
authenticates with kerberos on that laptop via sssd.
So, when she first logs in, sssd manages to get her a tgt and everything
is good. However when gnome-screensaver locks her screen and she uses
her (kerberos of course) password to unlock it, there does not seem to
be any tgt renewal happening like it did with pam_krb5.so.
Have I configured something incorrectly? The domain I created for
kerberos looks like:
[domain/KRB]
auth_provider = krb5
cache_credentials = true
enumerate = true
id_provider = ldap
chpass_provider = krb5
ldap_uri = ldap://ldap
ldap_user_search_base = ou=People,dc=interlinx,dc=bc,dc=ca
ldap_group_search_base = ou=Group,dc=interlinx,dc=bc,dc=ca
tls_reqcert = demand
ldap_tls_cacert = /etc/pki/tls/certs/ca-bundle.crt
krb5_kdcip = 10.75.22.3
krb5_realm = ILINX
krb5_changepw_principle = kadmin/changepw
krb5_ccachedir = /tmp
krb5_ccname_template = FILE:%d/krb5cc_%U_XXXXXX
krb5_auth_timeout = 15
Have I done something incorrectly?
Cheers,
b.
14 years, 5 months