Deploy keytab file to other location

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-12-12 00:33:57 +00:00 · 2016-12-12 00:33:57 +00:00 · 57e11b70c1
commit 57e11b70c1
parent bbdef52169
2 changed files with 10 additions and 1 deletions
--- a/roles/koji_hub/tasks/main.yml
+++ b/roles/koji_hub/tasks/main.yml
@ -91,6 +91,15 @@
  - config
  - koji_hub

+- name: install GSSAPI keytab
+  copy: src={{ private }}/files/keytabs/{{ env }}/koji-gssapi dest=/etc/koji-hub/gssapi.keytab
+        owner=apache group=apache mode=0600
+  notify:
+  - reload httpd
+  tags:
+  - config
+  - koji_hub
+
 #
 # install production certs and keys
 #
--- a/roles/koji_hub/templates/kojihub.conf.j2
+++ b/roles/koji_hub/templates/kojihub.conf.j2
@ -29,7 +29,7 @@ Alias /kojifiles "/mnt/koji/"
 	 GssapiSSLonly On
         GssapiLocalName On
 	 AuthName "GSSAPI Single Sign On Login"
-	 GssapiCredStore keytab:/etc/koji-hub-http.keytab
+	 GssapiCredStore keytab:/etc/koji-hub/gssapi.keytab
 	 Require valid-user
 </Location>