IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-01-12 17:21:55 -06:00
Code Issues Packages Projects Releases Wiki Activity
ffea8218c7
freeipa/client
History
Florence Blanc-Renaud a0d90263d6 server uninstall fails to remove krb principals 
This patch fixes the 3rd issue of ticket 6012:
ipa-server-install --uninstall -U
complains while removing Kerberos service principals from /etc/krb5.keytab
----
Failed to remove Kerberos service principals: Command '/usr/sbin/ipa-rmkeytab -k /etc/krb5.keytab -r DOM-221.ABC.IDM.LAB.ENG.BRQ.REDHAT.COM' returned non-zero exit status 5
----

This happens because the uninstaller performs the following sequence:
1/ restore pre-install files, including /etc/krb5.keytab
At this point /etc/krb5.keytab does not contain any principal for
IPA domain
2/ call ipa-client-install --uninstall, which in turns runs
ipa-rmkeytab -k /etc/krb5.keytab -r <domain>
to remove the principals.

The fix ignores ipa-rmkeytab's exit code 5 (Principal name or realm not
found in keytab)

https://fedorahosted.org/freeipa/ticket/6012

Reviewed-By: Martin Basti <mbasti@redhat.com>
2016-07-20 16:35:49 +02:00
..
man man: Decribe ipa-client-install workaround for broken D-Bus enviroment. 2016-06-09 13:08:46 +02:00
config.c Split ipa-client/ into ipaclient/ (Python library) and client/ (C, scripts) 2016-01-27 12:09:02 +01:00
configure.ac CONFIGURE: Replace obsolete macros 2016-03-08 20:02:27 +01:00
ipa-certupdate Split ipa-client/ into ipaclient/ (Python library) and client/ (C, scripts) 2016-01-27 12:09:02 +01:00
ipa-client-automount Split ipa-client/ into ipaclient/ (Python library) and client/ (C, scripts) 2016-01-27 12:09:02 +01:00
ipa-client-common.c Split ipa-client/ into ipaclient/ (Python library) and client/ (C, scripts) 2016-01-27 12:09:02 +01:00
ipa-client-common.h Migrate from #ifndef guards to #pragma once 2016-05-29 14:04:45 +02:00
ipa-client-install server uninstall fails to remove krb principals 2016-07-20 16:35:49 +02:00
ipa-getkeytab.c Increase ipa-getkeytab LDAP timeout to 100sec 2016-06-27 09:33:02 +02:00
ipa-join.c ipa-rmkeytab, ipa-join: don't fail if init of gettext failed 2016-06-27 12:34:18 +02:00
ipa-rmkeytab.c ipa-rmkeytab, ipa-join: don't fail if init of gettext failed 2016-06-27 12:34:18 +02:00
Makefile.am Split ipa-client/ into ipaclient/ (Python library) and client/ (C, scripts) 2016-01-27 12:09:02 +01:00
version.m4.in Split ipa-client/ into ipaclient/ (Python library) and client/ (C, scripts) 2016-01-27 12:09:02 +01:00