On 1/18/11 4:02 PM, "Simo Sorce" <[email protected]> wrote:

>
>We need to use authenticated lda binds in init scripts as otherwise
>starting components fails when the option to restrict anonymous access
>to ldap is set.
>
>In order to do that we need to also start the KDC unconditionally, so
>it has been removed form the list of services retrieved from ldap and
>always started/stopped/restarted explicitly in the script.
>This is necessary so the script can obtain kerberos credentials to bind
>to ds using its keytab.
>
>Fixes ticket #795
>
>Simo.
>
>-- 
>Simo Sorce * Red Hat, Inc * New York
>_______________________________________________
>Freeipa-devel mailing list
>[email protected]
>https://www.redhat.com/mailman/listinfo/freeipa-devel


ACK


_______________________________________________
Freeipa-devel mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/freeipa-devel

Reply via email to