From 31b058a884651b9be9a74e31c146bfae5020c9d4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Aur=C3=A9lien=20Bompard?= <aurelien@bompard.org>
Date: Fri, 11 Sep 2020 12:15:52 +0200
Subject: [PATCH] Ipsilon: set the keytab paths in krb5.conf
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
---
 roles/ipsilon/templates/configmap.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/roles/ipsilon/templates/configmap.yml b/roles/ipsilon/templates/configmap.yml
index 92c242ad71..edc99b2089 100644
--- a/roles/ipsilon/templates/configmap.yml
+++ b/roles/ipsilon/templates/configmap.yml
@@ -21,6 +21,8 @@ data:
      ticket_lifetime = 24h
      renew_lifetime = 7d
      forwardable = true
+     default_keytab_name = FILE:/etc/keytabs/ipsilon-keytab
+     default_client_keytab_name = FILE:/etc/keytabs/ipsilon-keytab
     [realms]
      {{ ipa_realm }} = {
       kdc = https://id{{ env_suffix }}.fedoraproject.org/KdcProxy