mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-01-12 17:21:55 -06:00
c6644b8566
Rather than having a shared ccache per user, configure mod_auth_gssapi to create a unique one. This requires cleanup to remove expired caches. A new script is added, ipa-ccache-sweeper to do this. It will be invoked by a new service, ipa-ccache-sweep, which will be executed every 12 hours by an equally-named timer. https://pagure.io/freeipa/issue/8589 Signed-off-by: Rob Crittenden <rcritten@redhat.com> Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com> Reviewed-By: Francois Cami <fcami@redhat.com>
9 lines
124 B
SYSTEMD
9 lines
124 B
SYSTEMD
[Unit]
|
|
Description=Remove Expired Kerberos Credential Caches
|
|
|
|
[Timer]
|
|
OnUnitActiveSec=12h
|
|
|
|
[Install]
|
|
WantedBy=timers.target
|