URL: https://github.com/freeipa/freeipa/pull/468
Title: #468: Remove non-sensical kdestroy on https stop
martbab commented:
"""
I would rather keep `kdestroy` there, but only really purge the apache ccache
explicitly:
```diff
--- a/ipaplatform/redhat/tasks.py
+++ b/ipaplatform/redhat/tasks.py
@@ -452,7 +452,8 @@ class RedHatTaskNamespace(BaseTaskNamespace):
KRB5CC_HTTPD=paths.KRB5CC_HTTPD,
KDCPROXY_CONFIG=paths.KDCPROXY_CONFIG,
IPA_HTTPD_KDCPROXY=paths.IPA_HTTPD_KDCPROXY,
- POST='-{kdestroy} -A'.format(kdestroy=paths.KDESTROY)
+ POST='-{kdestroy} -c {ccache}'.format(
+ kdestroy=paths.KDESTROY, ccache=paths.KRB5CC_HTTPD)
)
)
```
Otherwise we will bump into regressions caused by stale HTTPD ccaches left over
when backing up/restoring IPA installation. I would demonstrate it on a failing
backup/restore tests but they are completely messed up right now.
"""
See the full comment at
https://github.com/freeipa/freeipa/pull/468#issuecomment-280038786
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
