URL: https://github.com/freeipa/freeipa/pull/468
Title: #468: Remove non-sensical kdestroy on https stop

martbab commented:
"""
I would rather keep `kdestroy` there, but only really purge the apache ccache 
explicitly:

```diff
--- a/ipaplatform/redhat/tasks.py
+++ b/ipaplatform/redhat/tasks.py
@@ -452,7 +452,8 @@ class RedHatTaskNamespace(BaseTaskNamespace):
                 KRB5CC_HTTPD=paths.KRB5CC_HTTPD,
                 KDCPROXY_CONFIG=paths.KDCPROXY_CONFIG,
                 IPA_HTTPD_KDCPROXY=paths.IPA_HTTPD_KDCPROXY,
-                POST='-{kdestroy} -A'.format(kdestroy=paths.KDESTROY)
+                POST='-{kdestroy} -c {ccache}'.format(
+                    kdestroy=paths.KDESTROY, ccache=paths.KRB5CC_HTTPD)
             )
         )
```

Otherwise we will bump into regressions caused by stale HTTPD ccaches left over 
when backing up/restoring IPA installation. I would demonstrate it on a failing 
backup/restore tests but they are completely messed up right now.
"""

See the full comment at 
https://github.com/freeipa/freeipa/pull/468#issuecomment-280038786
-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Reply via email to