Fix ownership of kerberos credentials cache

git-svn-id: https://svn.code.sf.net/p/xcat/code/xcat-core/trunk@7204 8638fb3e-16cb-4fca-ae20-7b5d299a9bcd
This commit is contained in:
jbjohnso 2010-08-24 15:37:18 +00:00
parent 160692e00a
commit 16b5860d73

View File

@ -28,8 +28,8 @@ if [ "$OSVER" = "rhels6" ]; then
echo krb5_ccname /var/run/ldap_krb5cc >> /etc/nslcd.conf
sed -i '/# Mappings for Active Directory/,/^[^#]/ s/^#\([^ ]\)/\1/' /etc/nslcd.conf
authconfig --update --enableldap --ldapserver=$LDAPSRV --ldapbasedn=$LDAPBASEDN
echo 'kinit '$HOSTPRINC'-c /var/run/ldap_krb5cc < /etc/krb5.hostpass >& /dev/null' >> /etc/rc.local
echo 'kinit '$HOSTPRINC'-c /var/run/ldap_krb5cc < /etc/krb5.hostpass >& /dev/null' >> /etc/cron.hourly/nslcdkrb.cron
echo 'kinit '$HOSTPRINC'-c /var/run/ldap_krb5cc < /etc/krb5.hostpass >& /dev/null;chown nslcd /var/run/ldap_krb5cc' >> /etc/rc.local
echo 'kinit '$HOSTPRINC'-c /var/run/ldap_krb5cc < /etc/krb5.hostpass >& /dev/null;chown nslcd /var/run/ldap_krb5cc' >> /etc/cron.hourly/nslcdkrb.cron
chmod +x /etc/cron.hourly/nslcdkrb.cron
fi
#TODO: SLES/maybe RHEL5. Uncomfortable with libnss_ldap without root_krb5_ccname, ldap needs diff credentials per user