Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

The keytab path is hostname-dependant

Browse source 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
This commit is contained in:
Aurélien Bompard 2021-05-07 10:12:11 +02:00
parent bfe6cf9d02
commit 86567270dc
No known key found for this signature in database
GPG key ID: 31584CFEB9BF64AD
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
roles/ipa/server/files/cleanup-stage-users.py
View file

@ -7,10 +7,10 @@ from datetime import datetime, timedelta
from python_freeipa import ClientMeta
KEEP_DAYS = 7
KEYTAB = "/etc/krb5.stage-users_ipa01.stg.iad2.fedoraproject.org.keytab"
KEYTAB = "/etc/krb5.stage-users_{hostname}.keytab"
os.environ["KRB5_CLIENT_KTNAME"] = KEYTAB
hostname = socket.gethostname()
os.environ["KRB5_CLIENT_KTNAME"] = KEYTAB.format(hostname=hostname)
client = ClientMeta(hostname)
client.login_kerberos()
threshold = datetime.utcnow() - timedelta(days=KEEP_DAYS)