summaryrefslogtreecommitdiffstats
path: root/confskel
diff options
context:
space:
mode:
authorTimothy Pearson <[email protected]>2013-02-28 17:14:41 -0600
committerTimothy Pearson <[email protected]>2013-02-28 17:14:41 -0600
commit98a380ce0d20fed013a3d2a450e223bd9c470e4a (patch)
tree29351601a2734ec8b8427e888b7fb68675f447a7 /confskel
parentb121ce15fe8cbf1511c61b0c446211a43ba60a1c (diff)
downloadkcmldapcontroller-98a380ce0d20fed013a3d2a450e223bd9c470e4a.tar.gz
kcmldapcontroller-98a380ce0d20fed013a3d2a450e223bd9c470e4a.zip
Fix KDC verification failure due to bonding utility failing to obtain host heys
See http://kerberos.996246.n3.nabble.com/kadmin-kadmind-ext-keytab-issue-td11529.html for fix
Diffstat (limited to 'confskel')
-rw-r--r--confskel/heimdal/kadmind.acl4
1 files changed, 2 insertions, 2 deletions
diff --git a/confskel/heimdal/kadmind.acl b/confskel/heimdal/kadmind.acl
index b534354..29c2cd2 100644
--- a/confskel/heimdal/kadmind.acl
+++ b/confskel/heimdal/kadmind.acl
@@ -2,7 +2,7 @@
# All changes will be lost!
# Internal Kerberos administration account
-kadmin/@@@ROOTUSER@@@@@@@REALM_UCNAME@@@ all
+kadmin/@@@ROOTUSER@@@@@@@REALM_UCNAME@@@ all,get-keys
# Configured realm administrators
-@@@ADMINUSER@@@@@@@REALM_UCNAME@@@ all \ No newline at end of file
+@@@ADMINUSER@@@@@@@REALM_UCNAME@@@ all,get-keys