From 8fb9a4a82c6ab1026e3d414d39b86d0467735a37 Mon Sep 17 00:00:00 2001 From: Petr Vobornik Date: Thu, 20 Nov 2014 15:11:02 +0100 Subject: [PATCH] restore: clear httpd ccache after restore so that httpd ccache won't contain old credentials which would make ipa CLI fail with error: Insufficient access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Decrypt integrity check failed) https://fedorahosted.org/freeipa/ticket/4726 Reviewed-By: Petr Viktorin --- ipaserver/install/ipa_restore.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/ipaserver/install/ipa_restore.py b/ipaserver/install/ipa_restore.py index 7b92ab5d490a7a254b1ea307d5031da002b9f653..93f176d302a49319940555a0be3037620143e1f3 100644 --- a/ipaserver/install/ipa_restore.py +++ b/ipaserver/install/ipa_restore.py @@ -315,6 +315,8 @@ class Restore(admintool.AdminTool): self.log.info('Restarting SSSD') sssd = services.service('sssd') sssd.restart() + http = httpinstance.HTTPInstance() + http.remove_httpd_ccache() finally: try: os.chdir(cwd) -- 2.1.0