From fca9819f8aa3fd401134d9747fa85d816aa17e78 Mon Sep 17 00:00:00 2001 From: Patrick Uiterwijk Date: Tue, 18 Apr 2017 02:26:36 +0000 Subject: [PATCH] No longer depend on reverse DNS for keytab entry decision Signed-off-by: Patrick Uiterwijk --- roles/koji_builder/templates/kojid.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/roles/koji_builder/templates/kojid.conf b/roles/koji_builder/templates/kojid.conf index 4e97f6c430..e1594b932f 100644 --- a/roles/koji_builder/templates/kojid.conf +++ b/roles/koji_builder/templates/kojid.conf @@ -77,7 +77,7 @@ from_addr=Fedora Koji Build System serverca = /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem ; Kerberos configuration -host_principal_format = compile/%s@{{ ipa_realm }} +krb_principal = compile/{{ inventory_hostname }}@{{ ipa_realm }} keytab = /etc/kojid/kojid.keytab krbservice = host krb_rdns = false