Alexander Bokovoy 208b9b4c7c service: enforce keytab user when retrieving the keytab ... HTTP service uses different user for keytab ownership than the service user. On Fedora this leads to http.keytab being owned by 'apache' user after IPA deployment while it should be owned by 'root' to allow GSSPROXY configuration to work correctly. The situation is fixed during upgrade (ipa-server-upgrade) but it means for new deployments there might be a period of unexplained Web UI authentication failures. Fixes: https://pagure.io/freeipa/issue/8872 Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com> Signed-off-by: Christian Heimes <cheimes@redhat.com> Reviewed-By: Christian Heimes <cheimes@redhat.com>		2021-06-03 13:34:13 +03:00
..
advise	Change FreeIPA references to IPA and Identity Management	2021-01-21 13:51:45 +01:00
dnssec	OpenDNSSEC: fix timezone in key creation date	2021-02-04 14:20:59 +01:00
install	service: enforce keytab user when retrieving the keytab	2021-06-03 13:34:13 +03:00
plugins	dns: get_reverse_zone: Ignore resolver's timeout	2021-05-25 10:45:49 +03:00
secrets	NSSWrappedCertDB: accept optional symmetric algorithm	2019-09-25 12:42:06 +10:00
__init__.py	Change FreeIPA license to GPLv3+	2010-12-20 17:19:53 -05:00
dcerpc_common.py	Py3: Replace six.text_type with str	2018-09-27 16:11:18 +02:00
dcerpc.py	trust-fetch-domains: use custom krb5.conf overlay for all trust operations	2021-01-22 12:21:33 -05:00
dns_data_management.py	Lookup ipa-ca record with NSS	2020-10-10 12:54:06 +02:00
Makefile.am	Build: Makefiles for Python packages	2016-11-09 13:08:32 +01:00
masters.py	Add hidden replica feature	2019-03-28 17:57:58 +01:00
p11helper.py	Grammar: whitespace is a word	2020-06-23 10:16:29 +02:00
rpcserver.py	Extend logging to include execution time	2021-03-22 10:55:56 -04:00
servroles.py	Use api.env.container_sysaccounts	2020-04-28 11:28:29 +02:00
setup.cfg	Port all setup.py to setuptools	2016-10-20 18:43:37 +02:00
setup.py	Delay import of psutil to avoid AVC	2020-09-23 14:49:15 +02:00
topology.py	Py3: Remove subclassing from object	2018-09-27 11:49:04 +02:00
wsgi.py	Improve wsgi app loading	2021-04-07 11:43:23 +03:00