CentOS - Jun 2018 - Updated krb5 rpm package altered existing krb5.conf - No go

> Am 13.06.2018 um 17:55 schrieb Richard Grainger <grainger at
gmail.com>:
> 
> On Wed, Jun 13, 2018 at 3:54 PM G?tz Reinicke
> <goetz.reinicke at filmakademie.de> wrote:
>> 
>> Hi,
>> 
>> I did an centos update from 7.4 to 7.5 and the krb5 package altered the
existing and used config file! That should be a no go from my pov, as in my
setup it broke some services which had a problem with the includedir line which
was added.
> 
> Which config file?

/etc/krb5.conf

Regards . G?tz

On Wed, Jun 13, 2018 at 6:56 PM G?tz Reinicke
<goetz.reinicke at filmakademie.de> wrote:
> /etc/krb5.conf
>
I looked at the spec file in the source RPM for the krb5-libs package
and it it has the correct %config(noreplace) directive next to that
file in the %files section, so this is mysterious.

On Thu, 14 Jun 2018, Richard Grainger wrote:
> On Wed, Jun 13, 2018 at 6:56 PM G?tz Reinicke
> <goetz.reinicke at filmakademie.de> wrote:
>
>> /etc/krb5.conf
>>
> I looked at the spec file in the source RPM for the krb5-libs package
> and it it has the correct %config(noreplace) directive next to that
> file in the %files section, so this is mysterious.
I too can confirm this behavior. I do not know why it gets modified but
adding the include line breaks self compiled samba DC installations because
of the difference in kerberos types used with samba and Red Hat.

I suspect that this should be filed as a bug in upstream bugzilla since
it does not look like Centos modified the krb5-libs spec file.

Presently, to work around the problem, I have ansible fix the file after
updates.

Regards,

-- 
Tom			me at tdiehl.org