Pavel Zuna wrote:
It seems that restarting krb5kdc is only needed when changes to the global policy are made. Per-user policies take effect immediately for newly requested tickets. Can someone please confirm?
Yes, in testing this is the behavior. If the help could specify that a ipactl restart is required after global policy change, that would be great.

Fix #844


Freeipa-devel mailing list

Jenny Galipeau <>
Principal Software QA Engineer
Red Hat, Inc. Security Engineering

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
Freeipa-devel mailing list

Reply via email to