From 78c5d59d7430e1eb84adfea0c8ebc8799b791526 Mon Sep 17 00:00:00 2001
From: Patrick Uiterwijk <puiterwijk@redhat.com>
Date: Sun, 4 Dec 2016 03:02:21 +0000
Subject: [PATCH] Use id.fp.o keytab

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
---
 playbooks/groups/ipa.yml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/playbooks/groups/ipa.yml b/playbooks/groups/ipa.yml
index 21491091b8..4ee394d291 100644
--- a/playbooks/groups/ipa.yml
+++ b/playbooks/groups/ipa.yml
@@ -55,6 +55,16 @@
     host: "id.fedoraproject.org"
     when: env == "production"
 
+  tasks:
+  - name: Make symlink for keytab
+    file: state=link path=/etc/httpd/conf/ipa.keytab
+          src="/etc/krb5.HTTP_id{{env_suffix}}.fedoraproject.org.keytab"
+    notify:
+    - reload httpd
+    tags:
+    - ipa/server
+    - krb5
+
   handlers:
   - include: "{{ handlers }}/restart_services.yml"