ac7d03
From 6c4d53f843575d5e69a0c310cdb2e5026751faa4 Mon Sep 17 00:00:00 2001
ac7d03
From: Simo Sorce <simo@redhat.com>
ac7d03
Date: Mon, 6 Mar 2017 13:46:44 -0500
ac7d03
Subject: [PATCH] Add options to allow ticket caching
ac7d03
ac7d03
This new option (planned to land in gssproxy 0.7) we cache the ldap
ac7d03
ticket properly and avoid a ticket lookup to the KDC on each and every
ac7d03
ldap connection. (Also requires krb5 libs 1.15.1 to benefit from caching).
ac7d03
ac7d03
Ticket: https://pagure.io/freeipa/issue/6771
ac7d03
ac7d03
Signed-off-by: Simo Sorce <simo@redhat.com>
ac7d03
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
ac7d03
---
ac7d03
 install/share/gssproxy.conf.template | 2 ++
ac7d03
 1 file changed, 2 insertions(+)
ac7d03
ac7d03
diff --git a/install/share/gssproxy.conf.template b/install/share/gssproxy.conf.template
ac7d03
index fbb158a689a430168ea9841d59cb558755371968..9d111009f5a5ba24dd474be336bf0cb27ab59aab 100644
ac7d03
--- a/install/share/gssproxy.conf.template
ac7d03
+++ b/install/share/gssproxy.conf.template
ac7d03
@@ -4,6 +4,7 @@
ac7d03
   cred_store = keytab:$HTTP_KEYTAB
ac7d03
   cred_store = client_keytab:$HTTP_KEYTAB
ac7d03
   allow_protocol_transition = true
ac7d03
+  allow_client_ccache_sync = true
ac7d03
   cred_usage = both
ac7d03
   euid = $HTTPD_USER
ac7d03
 
ac7d03
@@ -12,5 +13,6 @@
ac7d03
   cred_store = keytab:$HTTP_KEYTAB
ac7d03
   cred_store = client_keytab:$HTTP_KEYTAB
ac7d03
   allow_constrained_delegation = true
ac7d03
+  allow_client_ccache_sync = true
ac7d03
   cred_usage = initiate
ac7d03
   euid = $IPAAPI_USER
ac7d03
-- 
ac7d03
2.12.0
ac7d03