From 3e5a32fa9cbd8ea3f33517605b284afc8a46d85a Mon Sep 17 00:00:00 2001
From: Adam Glasgall <adam@crossproduct.net>
Date: Sun, 19 May 2013 23:11:02 -0400
Subject: [PATCH] don't specifically request an afs service ticket anymore;
 let aklog take care of it. This lets us leave
 allow_weak_crypto off.

---
 files/etc/init.d/apache2.invirt |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/files/etc/init.d/apache2.invirt b/files/etc/init.d/apache2.invirt
index 3a4d69b..21249ff 100755
--- a/files/etc/init.d/apache2.invirt
+++ b/files/etc/init.d/apache2.invirt
@@ -24,7 +24,7 @@ kstart_start () {
     chown www-data $KRB5CCNAME
     /sbin/start-stop-daemon --start --pidfile "$TMP_PIDFILE" -c www-data \
 	--exec /usr/bin/k5start -- -b -p "$TMP_PIDFILE" \
-	-f "$KSTART_KEYTAB" -K10 -S afs -I "$AFSCELL" -t \
+	-f "$KSTART_KEYTAB" -K10  -t \
         "daemon/$(hostname -f)"
     cat "$TMP_PIDFILE" >|"$KSTART_PIDFILE"
     rm -f "$TMP_PIDFILE"
-- 
1.7.9.5