freeipa/install/conf
Petr Vobornik fd840a9cd7 mod_auth_gssapi: enable unique credential caches names
mod_auth_gssapi > 1.4.0 implements support for unique ccaches names.
Without it ccache name is derived from pricipal name.

It solves a race condition in two concurrent request of the same
principal. Where first request deletes the ccache and the second
tries to use it which then fails. It may lead e.g. to a failure of
two concurrent ipa-client-install.

With this feature there are two ccaches so there is no clash.

https://fedorahosted.org/freeipa/ticket/5653

Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>
Reviewed-By: Robbie Harwood <rharwood@redhat.com>
2016-06-24 16:06:49 +02:00
..
ipa-kdc-proxy.conf.template Provide Kerberos over HTTP (MS-KKDCP) 2015-06-24 10:43:58 +02:00
ipa-pki-proxy.conf Add 'ca' plugin 2016-06-15 07:13:38 +02:00
ipa-rewrite.conf Do not redirect to https in /ipa/ui on non-HTML files 2013-06-26 15:02:13 +02:00
ipa.conf mod_auth_gssapi: enable unique credential caches names 2016-06-24 16:06:49 +02:00
Makefile.am Provide Kerberos over HTTP (MS-KKDCP) 2015-06-24 10:43:58 +02:00