Bug 1328608 - No means to set KRB5_KTNAME
Summary: No means to set KRB5_KTNAME
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Fedora
Classification: Fedora
Component: openldap
Version: 22
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Matus Honek
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-04-19 20:37 UTC by Pascal Jakobi
Modified: 2016-04-20 17:26 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2016-04-20 10:48:41 UTC
Type: Bug


Attachments (Terms of Use)

Description Pascal Jakobi 2016-04-19 20:37:11 UTC
In FC22, the /etc/sysconfig/[ldap,slapd] disappeared.
This is where the environment variable KRB5_KTNAME was set. This is necessary for GSS API.

Many ways to solve this. 
My suggestion :
1/ add EnvironmentFile=/etc/sysconfig/slapd in file /usr/lib/systemd/system/slapd.service
2/ Recreate the /etc/sysconfig/slapd file with some content such as
      #KRB5_KTNAME=/etc/openldap/ldap.keytab; export KRB5_KTNAME

Comment 1 Jan Synacek 2016-04-20 06:25:04 UTC
The correct way to do this is to copy the slapd service file to /etc/lib/systemd/system and add Environment="KRB...". I removed the sysconfig file on purpose, because it was superfluous.

Comment 2 Jan Synacek 2016-04-20 06:27:14 UTC
And by the way, the "No means to set..." in the summary is simply not true and you proved it by writing the 1/ bullet in the report.

Comment 3 Matus Honek 2016-04-20 10:48:41 UTC
Jan, thanks for the comment. As systemd is preferred I do not think it is a good idea to have two places for configuration.

Copying /usr/lib/systemd/system/slapd.service to /etc/systemd/system/ and setting the Environment property there fully replaces the previous sysconfig method of configuration of the environment variable. For that reason I am closing this as not a bug. Should this be not sufficient feel free to reopen this bug.

Comment 4 Jan Včelák 2016-04-20 17:26:59 UTC
(In reply to Jan Synacek from comment #1)
> The correct way to do this is to copy the slapd service file to
> /etc/lib/systemd/system and add Environment="KRB...". I removed the
> sysconfig file on purpose, because it was superfluous.

Even better way is to add /etc/systemd/system/slapd.service.d/kerberos.conf just with the Environment= options. See the 'systemctl edit' command.


Note You need to log in before you can comment on or make changes to this bug.