diff options
| author | Timothy Pearson <[email protected]> | 2013-02-28 17:14:41 -0600 |
|---|---|---|
| committer | Timothy Pearson <[email protected]> | 2013-02-28 17:14:41 -0600 |
| commit | 98a380ce0d20fed013a3d2a450e223bd9c470e4a (patch) | |
| tree | 29351601a2734ec8b8427e888b7fb68675f447a7 /acl-updater/plugin/plugin.cpp | |
| parent | b121ce15fe8cbf1511c61b0c446211a43ba60a1c (diff) | |
| download | kcmldapcontroller-98a380ce0d20fed013a3d2a450e223bd9c470e4a.tar.gz kcmldapcontroller-98a380ce0d20fed013a3d2a450e223bd9c470e4a.zip | |
Fix KDC verification failure due to bonding utility failing to obtain host heys
See http://kerberos.996246.n3.nabble.com/kadmin-kadmind-ext-keytab-issue-td11529.html for fix
Diffstat (limited to 'acl-updater/plugin/plugin.cpp')
| -rw-r--r-- | acl-updater/plugin/plugin.cpp | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/acl-updater/plugin/plugin.cpp b/acl-updater/plugin/plugin.cpp index a2ac3b2..f67fe0b 100644 --- a/acl-updater/plugin/plugin.cpp +++ b/acl-updater/plugin/plugin.cpp @@ -87,7 +87,7 @@ post_modify (Slapi_PBlock *pb) stream << "\n\n"; stream << "# Internal Kerberos administration account\n"; - stream << TQString("kadmin/%1@%2\tall").arg(rootaccountname).arg(realmname); + stream << TQString("kadmin/%1@%2\tall,get-keys").arg(rootaccountname).arg(realmname); stream << "\n\n"; stream << "# Configured realm administrators\n"; @@ -98,7 +98,7 @@ post_modify (Slapi_PBlock *pb) krbConvertedUser.truncate(cmpos); krbConvertedUser.remove(0, eqpos); krbConvertedUser.append("@"+realmname); - stream << krbConvertedUser << "\tall\n"; + stream << krbConvertedUser << "\tall,get-keys\n"; } file.close(); } |