From 98a380ce0d20fed013a3d2a450e223bd9c470e4a Mon Sep 17 00:00:00 2001 From: Timothy Pearson Date: Thu, 28 Feb 2013 17:14:41 -0600 Subject: Fix KDC verification failure due to bonding utility failing to obtain host heys See http://kerberos.996246.n3.nabble.com/kadmin-kadmind-ext-keytab-issue-td11529.html for fix --- acl-updater/plugin/plugin.cpp | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'acl-updater/plugin/plugin.cpp') diff --git a/acl-updater/plugin/plugin.cpp b/acl-updater/plugin/plugin.cpp index a2ac3b2..f67fe0b 100644 --- a/acl-updater/plugin/plugin.cpp +++ b/acl-updater/plugin/plugin.cpp @@ -87,7 +87,7 @@ post_modify (Slapi_PBlock *pb) stream << "\n\n"; stream << "# Internal Kerberos administration account\n"; - stream << TQString("kadmin/%1@%2\tall").arg(rootaccountname).arg(realmname); + stream << TQString("kadmin/%1@%2\tall,get-keys").arg(rootaccountname).arg(realmname); stream << "\n\n"; stream << "# Configured realm administrators\n"; @@ -98,7 +98,7 @@ post_modify (Slapi_PBlock *pb) krbConvertedUser.truncate(cmpos); krbConvertedUser.remove(0, eqpos); krbConvertedUser.append("@"+realmname); - stream << krbConvertedUser << "\tall\n"; + stream << krbConvertedUser << "\tall,get-keys\n"; } file.close(); } -- cgit v1.2.1