A Debian user reported that their Kerberos credential cache was pointing
at the wrong file after upgrade. We need to try and reproduce this and
see if there's a legitimate bug here.
As noted in the ticket, I'm not opposed to having our upgrade script
purge the ccacheFile entries from the LDB cache if necessary. It should
be safe to do so.
Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
there is a change in libldb of f13 which makes the IPA access provider
fail if there a no memberof attributes in a host entry. I think this is
also the reason for #499. The first patch adds a new sysdb_attrs call
which does not create an empty element and the second patch add this
call to the IPA access provider.
For your convenience I have add patches against 1.2 and master.
this patch is already commited in the master branch but it makes sense
to have it in the 1.2 series too, because it is possilbe that the ccache
file of a user is removed before we know if it can be recreated.
this patch tries to reduce code duplication and to take care that the
data is always in the expected format independent if read from LDAP or
For you convenience I have attached versions for the master and the 1.2
this patch removes the service groups from the IPA access provider
because with working memberOf attributed for the service objects they
are not necessary anymore.
For your convenience I have attached patches for the master and the 1.2
this patch adds support for the new IPA HBAC schema to the master
branch. It has the same functionality as the corresponding patch to the
1.2 branch, i.e. it does not address the review comments of this patch.
I will post patches for 1.2 and master addressing these comments later