FASJSON: result of debugging with Simo

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>

roles/openshift-apps/fasjson/templates/httpd.conf

@@ -79,6 +79,7 @@ WSGIRestrictSignal Off
   GssapiSessionKey file:/httpdir/run/session.key
 
   GssapiCredStore keytab:/etc/keytabs/http
+  GssapiCredStore client_keytab:/etc/keytabs/http
   GssapiDelegCcacheDir /httpdir/run/ccaches
   GssapiDelegCcachePerms mode:0660
   GssapiUseS4U2Proxy on

roles/openshift-apps/fasjson/templates/krb5.conf

@@ -9,7 +9,7 @@ includedir /etc/krb5.conf.d/
   ticket_lifetime = 24h
   forwardable = true
   udp_preference_limit = 0
-  default_ccache_name = KEYRING:persistent:%{uid}
+  default_ccache_name = FILE:/tmp/%u.ccache
 
 [realms]
   {{ ipa_realm }} = {

roles/openshift-apps/fasjson/templates/start.sh

@@ -4,4 +4,5 @@ mkdir /httpdir/run/ /httpdir/run/ccaches/
 ln -s /etc/httpd/modules /httpdir/modules
 truncate --size=0 /httpdir/access.log /httpdir/error.log
 tail -qf /httpdir/access.log /httpdir/error.log &
+export KRB5CCNAME=/httpdir/httpd.ccache
 exec httpd -f /etc/fasjson/httpd.conf -DFOREGROUND -DNO_DETACH