Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Using API at id.fp.o broke

Browse source 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
This commit is contained in:
Patrick Uiterwijk 2017-08-10 17:43:51 +02:00
parent 1f1f175c9a
commit afd0a590f9
1 changed files with 16 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

32
playbooks/groups/ipa.yml
View file

@ -69,22 +69,22 @@
- krb5 - krb5
- ipa/server - ipa/server
# original: /etc/httpd/conf/ipa.keytab # original: /etc/httpd/conf/ipa.keytab
- name: Make IPA HTTP use the combined keytab #- name: Make IPA HTTP use the combined keytab
lineinfile: dest=/etc/httpd/conf.d/ipa.conf # lineinfile: dest=/etc/httpd/conf.d/ipa.conf
regexp='GssapiCredStore keytab:' # regexp='GssapiCredStore keytab:'
line=' GssapiCredStore keytab:/etc/krb5.HTTP_id{{env_suffix}}.fedoraproject.org.keytab.combined' # line=' GssapiCredStore keytab:/etc/krb5.HTTP_id{{env_suffix}}.fedoraproject.org.keytab.combined'
tags: # tags:
- krb5 # - krb5
- ipa/server # - ipa/server
- config # - config
- name: Make IPA HTTP use the id.fp.o client keytab #- name: Make IPA HTTP use the id.fp.o client keytab
lineinfile: dest=/etc/httpd/conf.d/ipa.conf # lineinfile: dest=/etc/httpd/conf.d/ipa.conf
regexp='GssapiCredStore client_keytab:' # regexp='GssapiCredStore client_keytab:'
line=' GssapiCredStore client_keytab:/etc/krb5.HTTP_id{{env_suffix}}.fedoraproject.org.keytab' # line=' GssapiCredStore client_keytab:/etc/krb5.HTTP_id{{env_suffix}}.fedoraproject.org.keytab'
tags: # tags:
- krb5 # - krb5
- ipa/server # - ipa/server
- config # - config
- name: do base role once more to revert any resolvconf changes - name: do base role once more to revert any resolvconf changes
hosts: ipa:ipa-stg hosts: ipa:ipa-stg