Jenny Galipeau wrote:
Pavel Zuna wrote:
It seems that restarting krb5kdc is only needed when changes to the global policy are made. Per-user policies take effect immediately for newly requested tickets. Can someone please confirm?
Yes, in testing this is the behavior. If the help could specify that a ipactl restart is required after global policy change, that would be great.

Please raise a suitable bugzilla to get this included in the user doc. So far I only have doc about restarting IPA services after ipa krbtpolicy-reset.


Fix #844


Freeipa-devel mailing list


David O'Brien
Red Hat Asia Pacific Pty Ltd
+61 7 3514 8189

"He who asks is a fool for five minutes, but he who does not ask remains a fool forever."
 ~ Chinese proverb

Freeipa-devel mailing list

Reply via email to