Upstream has changed the default OTP socket search directory: https://github.com/krb5/krb5/pull/45
This code will be available in 1.13 by default. We will probably update this change in krb5 1.12 (and maybe 1.11). FreeIPA will need to respect this default. And any update in krb5 which makes this change needs to be synchronized with FreeIPA.
https://www.redhat.com/archives/freeipa-devel/2014-February/msg00064.html
Ticket has been cloned to Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1063850
krb5 change: https://bugzilla.redhat.com/show_bug.cgi?id=1063905
I am thinking we should not commit that change to FreeIPA 3.3.x branch as we still try to keep it functional in Fedora 19 which does not have that Kerberos.
I thus plan to push to master branch only and will backport that patch to Fedora 20 as a single patch.
master: 6c500cc
Metadata Update from @npmccallum: - Issue assigned to npmccallum - Issue set to the milestone: FreeIPA 4.0 - 2014/02
Login to comment on this ticket.