590d18
From be295102c07510a8136e016c0af0e67363d513c2 Mon Sep 17 00:00:00 2001
590d18
From: Martin Babinsky <mbabinsk@redhat.com>
590d18
Date: Wed, 16 Sep 2015 18:35:21 +0200
590d18
Subject: [PATCH] destroy httpd ccache after stopping the service
590d18
590d18
This will force recreation of the file-based ccache after IPA restore and
590d18
prevent a mismatch between cached and restored Kerberos keys.
590d18
590d18
https://fedorahosted.org/freeipa/ticket/5296
590d18
590d18
Reviewed-By: Martin Basti <mbasti@redhat.com>
590d18
---
590d18
 init/systemd/httpd.service | 1 +
590d18
 1 file changed, 1 insertion(+)
590d18
590d18
diff --git a/init/systemd/httpd.service b/init/systemd/httpd.service
590d18
index e68f39eca759db50ad18d8db1faa3b704cb15ede..7ce8f04d8b9bb3663e59d4fdc610af0eb4478178 100644
590d18
--- a/init/systemd/httpd.service
590d18
+++ b/init/systemd/httpd.service
590d18
@@ -4,3 +4,4 @@
590d18
 Environment=KRB5CCNAME=/var/run/httpd/ipa/krbcache/krb5ccache
590d18
 Environment=KDCPROXY_CONFIG=/etc/ipa/kdcproxy/kdcproxy.conf
590d18
 ExecStartPre=/usr/libexec/ipa/ipa-httpd-kdcproxy
590d18
+ExecStopPost=-/usr/bin/kdestroy -A
590d18
-- 
590d18
2.4.3
590d18