Hello, Thank you very much for your time and attention.
I changed client side code (kinit.c) but it requires to change all clients. Now, I decided to change server side code. I thought it may be better choice. Should I change policy.c file to change ticket policies? It does not require recompiling krb5kdc? I install FreeIPA on Fedora 18, When I execute klist -V command, hence get following result: Kerberos 5 version 1.10.3 Best regards. On Mon, Sep 9, 2013 at 6:00 PM, Simo Sorce <[email protected]> wrote: > On Mon, 2013-09-09 at 08:07 +0430, Mahmoud wrote: > > Hello Simo > > > > > > The previous problem occurred due to installing krb5-1.11.3. I install > > krb5-1.10.6 and copy ipadb.so in appropriate directory, hence the > > problem has been solved. Is it all right? > > > No it is not, we require 1.11.3 for OTP support in the latest FreeIPA. > > Seriously, chaingin the KDC is the last thing you want to do to solve > your problem. > > Have you looked into creating custom ticket policies for your users ? > > Why do you need to change the KDC to do that ? > > Simo. > > > > Thank you. > > > > Best regards. > > > > > > > > On Mon, Sep 9, 2013 at 7:47 AM, Luke Howard <[email protected]> wrote: > > > > On 09/09/2013, at 1:08 PM, Mahmoud <[email protected]> wrote: > > > > > I thought FreeIpa uses krb5-1.10.3, but I use klist -V get > > following result: > > > Kerberos 5 version 1.10.3 > > > > > > Aren't these the same thing? > > > > -- Luke > > > > > > > -- > Simo Sorce * Red Hat, Inc * New York > >
_______________________________________________ Freeipa-devel mailing list [email protected] https://www.redhat.com/mailman/listinfo/freeipa-devel
