freeipa team mailing list archive

[gianluca <amato@xxxxxxxxxxxx>]

Public bug reported:

After having installed FreeIPA on Ubuntu 18.04, I cannot login by the
web interface. I think the problem is that Apache uses the certificate
in /var/lib/krb5kdc/kdc.crt to get Kerberos credentials. Although this
file is readable by everyone, the directory /var/lib/krb5kdc is only
accessible by root. After a 'chmod 0755 /var/lib/krb5kdc' it is possible
to login trough the web interface.

** Affects: freeipa (Ubuntu)
     Importance: Undecided
         Status: New

** Summary changed:

- freeipa installation - directory / is nvar/lib/krb5kdcot accessible by Apache 
+ freeipa installation - directory /var/lib/krb5kdcot accessible by Apache

** Summary changed:

- freeipa installation - directory /var/lib/krb5kdcot accessible by Apache
+ freeipa installation - directory /var/lib/krb5kdc is not accessible by Apache

-- 
You received this bug notification because you are a member of FreeIPA,
which is subscribed to freeipa in Ubuntu.
https://bugs.launchpad.net/bugs/1772447

Title:
  freeipa installation - directory /var/lib/krb5kdc is not accessible by
  Apache

Status in freeipa package in Ubuntu:
  New

Bug description:
  After having installed FreeIPA on Ubuntu 18.04, I cannot login by the
  web interface. I think the problem is that Apache uses the certificate
  in /var/lib/krb5kdc/kdc.crt to get Kerberos credentials. Although this
  file is readable by everyone, the directory /var/lib/krb5kdc is only
  accessible by root. After a 'chmod 0755 /var/lib/krb5kdc' it is
  possible to login trough the web interface.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/freeipa/+bug/1772447/+subscriptions