From 3e5a32fa9cbd8ea3f33517605b284afc8a46d85a Mon Sep 17 00:00:00 2001 From: Adam Glasgall Date: Sun, 19 May 2013 23:11:02 -0400 Subject: [PATCH] don't specifically request an afs service ticket anymore; let aklog take care of it. This lets us leave allow_weak_crypto off. --- files/etc/init.d/apache2.invirt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/files/etc/init.d/apache2.invirt b/files/etc/init.d/apache2.invirt index 3a4d69b..21249ff 100755 --- a/files/etc/init.d/apache2.invirt +++ b/files/etc/init.d/apache2.invirt @@ -24,7 +24,7 @@ kstart_start () { chown www-data $KRB5CCNAME /sbin/start-stop-daemon --start --pidfile "$TMP_PIDFILE" -c www-data \ --exec /usr/bin/k5start -- -b -p "$TMP_PIDFILE" \ - -f "$KSTART_KEYTAB" -K10 -S afs -I "$AFSCELL" -t \ + -f "$KSTART_KEYTAB" -K10 -t \ "daemon/$(hostname -f)" cat "$TMP_PIDFILE" >|"$KSTART_PIDFILE" rm -f "$TMP_PIDFILE" -- 1.7.9.5