Configure keytab for robosignatory

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-12-11 20:51:48 +00:00 · 2016-12-11 20:51:48 +00:00 · 4866532ff7
commit 4866532ff7
parent 601eaef4cc
1 changed files with 3 additions and 3 deletions
--- a/roles/robosignatory/files/robosignatory.production.py
+++ b/roles/robosignatory/files/robosignatory.production.py
@ -21,9 +21,9 @@ config = {
            'url': 'https://koji.fedoraproject.org/kojihub',
            'options': {
                # Only ssl is supported at the moment
-                'authmethod': 'ssl',
-                'cert': '/etc/sigul/autopen.pem',
-                'serverca': '/etc/sigul/fedoraca.pem',
+                'authmethod': 'kerberos',
+                'principal': 'autosign/autosign01.phx2.fedoraproject.org',
+                'keytab': '/etc/krb5.autosign_autosign01.phx2.fedoraproject.org.keytab'
            },
            'tags': [
                {