Allow id.fp.o use

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
This commit is contained in:
Patrick Uiterwijk 2016-12-20 08:06:46 +00:00
parent 5ced2ec87a
commit 2192db58db
2 changed files with 6 additions and 0 deletions

View file

@ -0,0 +1,4 @@
dn: cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,dc=fedoraproject,dc=org
changetype: modify
add: memberPrincipal
memberPrincipal: HTTP/id.fedoraproject.org@FEDORAPROJECT.ORG

View file

@ -203,6 +203,7 @@
with_items:
- grant_anonymous_replication_view.ldif
- grant_fas_sync.ldif
- use_id_fp_o.ldif
tags:
- ipa/server
- config
@ -212,6 +213,7 @@
-f /root/ldif/{{item}}.ldif
with_items:
- grant_fas_sync
- use_id_fp_o
when: inventory_hostname.startswith("ipa01")
tags:
- ipa/server