Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

This differs for prod vs stg

Browse source 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
This commit is contained in:
Patrick Uiterwijk 2016-11-24 18:02:51 +00:00
parent fd0a78df1a
commit a18f9b62b0
2 changed files with 6 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
roles/ipsilon/tasks/main.yml
View file

@ -76,8 +76,8 @@
- restart apache - restart apache
- name: copy ipsilon httpd config - name: copy ipsilon httpd config
copy: src=ipsilon-httpd.conf template: src=ipsilon-httpd.conf.j2
dest=/etc/httpd/conf.d/ipsilon.conf dest=/etc/httpd/conf.d/ipsilon.conf
- name: Create Ipsilon config symlink - name: Create Ipsilon config symlink
file: dest=/var/lib/ipsilon/ipsilon.conf file: dest=/var/lib/ipsilon/ipsilon.conf

4
roles/ipsilon/files/ipsilon-httpd.conf → roles/ipsilon/templates/ipsilon-httpd.conf.j2
View file

@ -11,7 +11,11 @@ WSGIImportScript /usr/libexec/ipsilon process-group=ipsilon application-group=ip
<Location /login/gssapi/negotiate> <Location /login/gssapi/negotiate>
AuthName "GSSAPI Single Sign On Login" AuthName "GSSAPI Single Sign On Login"
{% if env == "staging" %}
GssapiCredStore keytab:/etc/krb5.HTTP_id.stg.fedoraproject.org.keytab GssapiCredStore keytab:/etc/krb5.HTTP_id.stg.fedoraproject.org.keytab
{% else %}
GssapiCredStore keytab:/etc/krb5.HTTP_id.stg.fedoraproject.org.keytab
{% endif %}
AuthType GSSAPI AuthType GSSAPI
# This is off because Apache (and thus mod_auth_gssapi) doesn't know this is proxied over TLS # This is off because Apache (and thus mod_auth_gssapi) doesn't know this is proxied over TLS
GssapiSSLonly Off GssapiSSLonly Off