Kerberos 1.13 (which is used in e.g. in [Fedora Rawhide]) brought some changes related to the performance of KDB backend (for more details see [http://web.mit.edu/kerberos/krb5-1.13/ 1.13 Release Notes] and http://krbdev.mit.edu/rt/Ticket/Display.html?id=7977 this ticket).
The most significant change comes in the implemetation of flags which control write locking/unlocking and reversing in DB iteration API (krb5_db_iterate function).
The code in IPA KDC backend {{{(daemons/ipa-kdb/ipa_kdb.{c,h})}}} should be updated to reflect these API modifications.
Thanks for report! Simo, what do you think?
Alexander wanted to merge this patch in both 4.2 and 4.1 branches, to keep the code same.
master:
ipa-4-1:
Metadata Update from @mbabinsk: - Issue assigned to simo - Issue set to the milestone: FreeIPA 4.1.3
Login to comment on this ticket.