Skip to content
Snippets Groups Projects
Select Git revision
  • master default protected
  • v1.14.7
  • v1.14.6
  • v1.14.5
  • v1.14.4
  • v1.14.3
  • v1.14.2
  • v1.14.1
  • v1.14.0
  • v1.13.2
  • v1.13.1
  • v1.13.0
  • v1.12.1
  • v1.12.0
  • v1.11.1
  • v1.11.0
  • v1.10.0
  • v1.9.2
  • v1.9.1
  • v1.9.0
  • v1.8.4
21 results

ipaclient_setup_nss.py

Blame
    • Thomas Woerner's avatar
      0ec89eb5
      ipaclient: ipaclient_setup_nss also needs krb_name parameter · 0ec89eb5
      Thomas Woerner authored
      With the fix to defer creating the final krb5.conf on clients a bug has
      been introduced with ipaclient_setup_nss: The krb_name parameter that
      points to the temporary krb5 configuration was not added to the module.
      
      With a properly configured DNS (like for example IPA DNS) the krb TXT
      records have been present in the DNS configuration. These have been used
      automatically as a fallback and broke server affinity for the client.
      Without the TXT records creating the IPA NSS database failed with
       "Cannot find KDC for realm ..".
      
      The krb_name parameter has been added to ipaclient_setup_nss and is also
      properly set in tasks/install.yml.
      0ec89eb5
      History
      ipaclient: ipaclient_setup_nss also needs krb_name parameter
      Thomas Woerner authored
      With the fix to defer creating the final krb5.conf on clients a bug has
      been introduced with ipaclient_setup_nss: The krb_name parameter that
      points to the temporary krb5 configuration was not added to the module.
      
      With a properly configured DNS (like for example IPA DNS) the krb TXT
      records have been present in the DNS configuration. These have been used
      automatically as a fallback and broke server affinity for the client.
      Without the TXT records creating the IPA NSS database failed with
       "Cannot find KDC for realm ..".
      
      The krb_name parameter has been added to ipaclient_setup_nss and is also
      properly set in tasks/install.yml.