From 7304a32dd807bf1b9eee87caead583b37e901ef5 Mon Sep 17 00:00:00 2001 From: Patrick Uiterwijk Date: Fri, 28 Oct 2016 16:35:48 +0000 Subject: [PATCH] Use kdcproxy outside of PHX2 Signed-off-by: Patrick Uiterwijk --- roles/base/templates/krb5.conf.j2 | 11 +++++++++-- 1 file changed, 9 insertions(+), 2 deletions(-) diff --git a/roles/base/templates/krb5.conf.j2 b/roles/base/templates/krb5.conf.j2 index 22d7e88f29..be8666b526 100644 --- a/roles/base/templates/krb5.conf.j2 +++ b/roles/base/templates/krb5.conf.j2 @@ -18,13 +18,20 @@ [realms] {% if env == "production" %} FEDORAPROJECT.ORG = { +{% if datacenter == "phx2" %} kdc = ipa01.phx2.fedoraproject.org - admin_server = ipa01.phx2.fedoraproject.org + kdc = ipa02.phx2.fedoraproject.org +{% else %} + kdc = https://id.fedoraproject.org/KdcProxy +{% endif %} } {% else %} STG.FEDORAPROJECT.ORG = { +{% if datacenter == "phx2" %} kdc = ipa01.stg.phx2.fedoraproject.org - admin_server = ipa01.stg.phx2.fedoraproject.org +{% else %} + kdc = https://id.stg.fedoraproject.org/KdcProxy +{% endif %} } {% endif %}