From 86567270dcc60454c2a05733f7bb8adaa7df84ba Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Aur=C3=A9lien=20Bompard?= Date: Fri, 7 May 2021 10:12:11 +0200 Subject: [PATCH] The keytab path is hostname-dependant MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Aurélien Bompard --- roles/ipa/server/files/cleanup-stage-users.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/roles/ipa/server/files/cleanup-stage-users.py b/roles/ipa/server/files/cleanup-stage-users.py index 484796d1de..d5c1ba55d9 100644 --- a/roles/ipa/server/files/cleanup-stage-users.py +++ b/roles/ipa/server/files/cleanup-stage-users.py @@ -7,10 +7,10 @@ from datetime import datetime, timedelta from python_freeipa import ClientMeta KEEP_DAYS = 7 -KEYTAB = "/etc/krb5.stage-users_ipa01.stg.iad2.fedoraproject.org.keytab" +KEYTAB = "/etc/krb5.stage-users_{hostname}.keytab" -os.environ["KRB5_CLIENT_KTNAME"] = KEYTAB hostname = socket.gethostname() +os.environ["KRB5_CLIENT_KTNAME"] = KEYTAB.format(hostname=hostname) client = ClientMeta(hostname) client.login_kerberos() threshold = datetime.utcnow() - timedelta(days=KEEP_DAYS)