On 13.10.2015 09:34, Martin Babinsky wrote:
> On 10/13/2015 09:17 AM, Petr Spacek wrote:
>> On 12.10.2015 13:38, Martin Babinsky wrote:
>>> each service possessing Kerberos keytab wiil now remove it and destroy any
>>> associated credentials cache during its uninstall
>> BTW some time ago Simo proposed that we should remove caches and old keytabs
>> during *install* so problems caused by failing uninstallation will be fixed
>> repeated install. This is yet another step towards idempotent installer.
>> To me this makes more sense than doing so on uninstall. Does it make sense to
>> you, too?
> If the problem is formulated like this (the endpoint is that services have
> their keytabs) then it makes more sense to me. I will rework the patch
Adding Simo to Cc, so we can be sure that we understood it properly :-)
Simo, does it make sense to do that on installation rather than installation?
Manage your subscription for the Freeipa-devel mailing list:
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code