Hacker News new | ask | show | jobs
by Borealid 4030 days ago
One time I had MIT Kerberos installed. The /etc/krb5.conf file had been edited.

The dist-upgrade included an upgrade of the mit-krb5 RPMs. One of those RPMs had a %postinstall that ran a sed command on the krb5.conf, to try to change a setting.

The sed command, run on the krb5.conf I had in place, blew away half the file.

That krb5.conf was necessary for users to log in; after the dist-upgrade, neither SSH nor local logins worked properly because the pam module bailed out entirely.