https://bugzilla.redhat.com/show_bug.cgi?id=714597
After running ipa-client-install on a RHEL 6.1 client, /etc/krb5.conf contains otherwise sane values but in the appdefaults/pam section it has the following entries:
ticket_lifetime renew_lifetime forwardable
These seem to be duplicating those values already defined in the libdefaults section. These values are also not present in the default /etc/krb5.conf provided by the recent krb5-libs packages.
It would seem best to add just debug/krb4_convert values to appdefaults/pam section.
master: f05141e
ipa-2-0: 17c2238
Bug re-opened. Nalin says that we should also remove this section:
[appdefaults] pam = { debug = false krb4_convert = false }
master: 592bf62
ipa-2-1: a065cfb
Metadata Update from @rcritten: - Issue assigned to jcholast - Issue set to the milestone: FreeIPA 2.1.3 (bug fixing)
Login to comment on this ticket.