From 69899c071d81a919520ef3c3fab0b5231362f3c9 Mon Sep 17 00:00:00 2001
From: Daniel Juarez <daniel.juarez.gonzalez@cern.ch>
Date: Tue, 27 Apr 2021 09:50:42 +0000
Subject: [PATCH] Make default krb5 tickets proxiable

---
 cern-krb5-conf.spec           | 5 ++++-
 src/cern-defaults-cernch.conf | 1 +
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/cern-krb5-conf.spec b/cern-krb5-conf.spec
index 4f1e058..13acd79 100644
--- a/cern-krb5-conf.spec
+++ b/cern-krb5-conf.spec
@@ -1,6 +1,6 @@
 Name:      cern-krb5-conf
 Version:   1.3
-Release:   3%{?dist}
+Release:   4%{?dist}
 Group:     CERN/Utilities
 License:   BSD
 URL:       http://linux.cern.ch
@@ -129,6 +129,9 @@ install -p -m 0644 cern-realm-ipadev.conf %{buildroot}/%{_sysconfdir}/krb5.conf.
 
 %changelog
 
+* Tue Apr 27 2021 Daniel Juarez <djuarezg@cern.ch> 1.3-4
+- Make tickets proxiable by default
+
 * Wed Jan 20 2021 Julien Rische <julien.rische@cern.ch> 1.3-3
 - Enable DNS reverse resolution in IPAdev defaults
 
diff --git a/src/cern-defaults-cernch.conf b/src/cern-defaults-cernch.conf
index 587b0f1..1e7262c 100644
--- a/src/cern-defaults-cernch.conf
+++ b/src/cern-defaults-cernch.conf
@@ -2,6 +2,7 @@
  default_realm = CERN.CH
  ticket_lifetime = 25h
  renew_lifetime = 120h
+ proxiable = true
 
 [domain_realm]
  .cern.ch = CERN.CH
-- 
GitLab