Add kerb to koji prod

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
This commit is contained in:
Patrick Uiterwijk 2016-10-13 17:47:25 +00:00
parent 65c74d2f4a
commit 5afc6bfc4e
2 changed files with 4 additions and 3 deletions

View file

@ -82,7 +82,6 @@
#
- name: install koji-hub keytab
when: env == "staging"
copy: src={{ private }}/files/keytabs/{{ env }}/koji-hub dest=/etc/koji-hub/koji-hub.keytab
owner=apache group=apache mode=0600
notify:

View file

@ -20,13 +20,15 @@ KojiDir = /mnt/koji
MemoryWarnThreshold = 10000
MaxRequestLength = 83886080
{% if env == "staging" %}
# Kerb auth
{% if env == "staging" %}
AuthPrincipal = host/koji.stg.fedoraproject.org
{% else %}
AuthPrincipal = host/koji.fedoraproject.org
{% endif %}
AuthKeytab = /etc/koji-hub/koji-hub.keytab
{% endif %}
## SSL client certificate auth configuration ##
#note: ssl auth may also require editing the httpd config (conf.d/kojihub.conf)