CentOS - Jun 2018 - Updated krb5 rpm package altered existing krb5.conf - No go

On Thu, 14 Jun 2018, Richard Grainger wrote:
> On Wed, Jun 13, 2018 at 6:56 PM G?tz Reinicke
> <goetz.reinicke at filmakademie.de> wrote:
>
>> /etc/krb5.conf
>>
> I looked at the spec file in the source RPM for the krb5-libs package
> and it it has the correct %config(noreplace) directive next to that
> file in the %files section, so this is mysterious.
I too can confirm this behavior. I do not know why it gets modified but
adding the include line breaks self compiled samba DC installations because
of the difference in kerberos types used with samba and Red Hat.

I suspect that this should be filed as a bug in upstream bugzilla since
it does not look like Centos modified the krb5-libs spec file.

Presently, to work around the problem, I have ansible fix the file after
updates.

Regards,

-- 
Tom			me at tdiehl.org

On 06/14/2018 09:30 AM, me at tdiehl.org wrote:
> On Thu, 14 Jun 2018, Richard Grainger wrote:
>
>> I looked at the spec file in the source RPM for the krb5-libs package
>> and it it has the correct %config(noreplace) directive next to that
>> file in the %files section, so this is mysterious.
>
> I too can confirm this behavior. 
# rpm -qa krb\* --triggers
triggerun scriptlet (using /bin/sh) -- krb5-libs < 1.15.1-13
if ! grep -q 'includedir /etc/krb5.conf.d' /etc/krb5.conf ; then
 ??? sed -i '1i # Other applications require this directory to perform 
krb5 configuration.\nincludedir /etc/krb5.conf.d/\n' /etc/krb5.conf
fi


Looks like that's the culprit.

> Am 15.06.2018 um 01:04 schrieb Gordon Messmer <gordon.messmer at
gmail.com>:
> 
> On 06/14/2018 09:30 AM, me at tdiehl.org wrote:
>> On Thu, 14 Jun 2018, Richard Grainger wrote:
>> 
>>> I looked at the spec file in the source RPM for the krb5-libs
package
>>> and it it has the correct %config(noreplace) directive next to that
>>> file in the %files section, so this is mysterious.
>> 
>> I too can confirm this behavior. 
> 
> # rpm -qa krb\* --triggers
> triggerun scriptlet (using /bin/sh) -- krb5-libs < 1.15.1-13
> if ! grep -q 'includedir /etc/krb5.conf.d' /etc/krb5.conf ; then
>     sed -i '1i # Other applications require this directory to perform
krb5 configuration.\nincludedir /etc/krb5.conf.d/\n' /etc/krb5.conf
> fi
> 
> 
> Looks like that's the culprit.

Good to know, but writing a rpmnew or rpmsave file would be nice to check
against the life used file.

The samba people are aware of that problem regarding the include line and are
working on a patch ? the support at SerNet told me.

	Regards . G?tz