[SSSD] [PATCH] Store the one-way keytabs in /var/lib/sss/keytabs

Jakub Hrozek jhrozek at redhat.com
Tue Jun 16 13:12:58 UTC 2015


On Tue, Jun 16, 2015 at 03:10:18PM +0200, Jakub Hrozek wrote:
> Proactively store the keytabs in /var/lib/sss/keytabs instead of
> /var/lib/sss/db/keytabs because users (including developers who rote
> tests) are used to removing everything under /var/lib/sss/db which
> removes the sssd-owned directory.
> 
> Unlike the other directories under /var/lib/sss this one doesn't have a
> matching configure option...I don't this we need one.
> 
> Make sure the directory is only accessible to the sssd user.
> 
> CI (rigorous by default now):
>     http://sssd-ci.duckdns.org/logs/commit/27/df243b8f6182a6093af432f1d23a21e4fb1456/1743/summary.html

btw I also amended the design page:
    https://fedorahosted.org/sssd/wiki/DesignDocs/OneWayTrusts?action=diff&version=11&old_version=10



More information about the sssd-devel mailing list