Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Adjust the location of the service keytab in ipsilon

Browse source 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
This commit is contained in:
Aurélien Bompard 2021-03-24 17:58:12 +01:00
parent 4c5e2d605b
commit 2c04966b51
No known key found for this signature in database
GPG key ID: 31584CFEB9BF64AD
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
roles/ipsilon/templates/httpd.conf.j2
View file

@ -55,7 +55,7 @@ WSGIApplicationGroup %{GLOBAL}
<Location /login/gssapi/negotiate>
AuthName "GSSAPI Single Sign On Login"
GssapiCredStore keytab:/etc/httpd/conf/http.keytab
GssapiCredStore keytab:/etc/krb5.HTTP_id{{ env_suffix }}.fedoraproject.org.keytab
AuthType GSSAPI
# This is off because Apache (and thus mod_auth_gssapi) doesn't know this is proxied over TLS
GssapiSSLonly Off