Description of problem:
ipa-server-install fails to create symlink from /etc/ipa/kdcproxy/ipa-kdc-proxy.conf to /etc/httpd/conf.d/ipa-kdc-proxy.conf
[root@ipamaster11 /]# ls /etc/systemd/system/httpd.service
ls: cannot access /etc/systemd/system/httpd.service: No such file or directory
[root@ipamaster11 /]# ls /etc/ipa/kdcproxy/ipa-kdc-proxy.conf
[root@ipamaster11 /]# ls /etc/httpd/conf.d/
autoindex.conf ipa.conf ipa-pki-proxy.conf ipa-rewrite.conf nss.conf README userdir.conf welcome.conf
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. Install ipa-server-install
2. ipa-ldap-updater /usr/share/ipa/kdcproxy-enable.uldif
3. systemctl restart httpd.service # This step should create symlink
No symlink found
Symlink should be created by installer or `systemctl restart httpd` which required for KKDCP feature.
If user runs /usr/libexec/ipa/ipa-httpd-kdcproxy then symlink is created
[root@ipamaster11 /]# /usr/libexec/ipa/ipa-httpd-kdcproxy
ipa : INFO KDC proxy enabled
Created attachment 1186816 [details]
The location of the httpd.service file was changed in https://git.fedorahosted.org/cgit/freeipa.git/commit/?id=586fee293f42388510fa5436af19460bbe1fdec5. The installer now creates the file '/etc/systemd/system/httpd.d/ipa.conf' instead of '/etc/systemd/system/httpd.service'.
Please notice 'httpd.d'. This directory is not recognized by systemd. The directory should be named 'httpd.service.d'. I can confirm that kdcproxy is enabled after:
# mv /etc/systemd/system/httpd.d /etc/systemd/system/httpd.service.d
# systemctl daemon-reload
# systemctl restart httpd
I'll post a patch to freeipa-dev.
Verified using IPA package::
Console log attached. Marking BZ as verified.
Created attachment 1188645 [details]
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.