[freeipa PR#5805][opened] service: enforce keytab user when retrieving the keytab

[abbra]

   URL: https://github.com/freeipa/freeipa/pull/5805
Author: abbra
 Title: #5805: service: enforce keytab user when retrieving the keytab
Action: opened

PR body:
"""
HTTP service uses different user for keytab ownership than the service
user. On Fedora this leads to http.keytab being owned by 'apache' user
after IPA deployment while it should be owned by 'root' to allow
GSSPROXY configuration to work correctly.

The situation is fixed during upgrade (ipa-server-upgrade) but it means
for new deployments there might be a period of unexplained Web UI
authentication failures.

Fixes: https://pagure.io/freeipa/issue/8872

Signed-off-by: Alexander Bokovoy <abokovoy(a)redhat.com&gt;
Signed-off-by: Christian Heimes <cheimes(a)redhat.com&gt;
"""

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5805/head:pr5805
git checkout pr5805

[freeipa PR#5805][closed] service: enforce keytab user when retrieving the keytab

[abbra]

   URL: https://github.com/freeipa/freeipa/pull/5805
Author: abbra
 Title: #5805: service: enforce keytab user when retrieving the keytab
Action: closed

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5805/head:pr5805
git checkout pr5805