*** This bug is a duplicate of bug 1772447 *** https://bugs.launchpad.net/bugs/1772447
I agree with Russ. On the Debian side, I would not support a change to krb5-kdc to make /var/lib/krb5kdc world readable. I think putting the public cert in /etc/krb5kdc is fine: I can make a case it's configuration not state. If you don't like that, place it somewhere else under /var/lib. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1791325 Title: freeipa server needs read access /var/lib/krb5kdc To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/freeipa/+bug/1791325/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs