Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Configure koji web login for if we want it

Browse source 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
This commit is contained in:
Patrick Uiterwijk 2016-11-23 01:36:15 +00:00
parent 9d55be3dae
commit d472159fc3
2 changed files with 14 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

8
roles/koji_hub/templates/kojiweb.conf.j2
View file

@ -21,9 +21,17 @@ Alias /robots.txt /var/www/html/robots.txt
</Directory> </Directory>
<Location /koji/login> <Location /koji/login>
{% if env == "production" %}
SSLVerifyClient require SSLVerifyClient require
SSLVerifyDepth 10 SSLVerifyDepth 10
SSLOptions +StdEnvVars SSLOptions +StdEnvVars
{% else %}
AuthType GSSAPI
GssapiSSLonly On
AuthName "GSSAPI Single Sign On Login"
GssapiCredStore keytab:/etc/koji-hub-http.keytab
Require valid-user
{% endif %}
</Location> </Location>

6
roles/koji_hub/templates/web.conf.j2
View file

@ -21,7 +21,13 @@ KojiFilesURL = https://kojipkgs.fedoraproject.org/
{% endif %} {% endif %}
# SSL authentication options # SSL authentication options
{% if env == "production" %}
WebCert = /etc/pki/tls/private/kojiweb_cert_key.pem WebCert = /etc/pki/tls/private/kojiweb_cert_key.pem
{% else %}
KrbRDNS = False
WebKeytab = /etc/koji-hub-http.keytab
WebPrincipal = HTTP/koji.stg.fedoraproject.org
{% endif %}
ClientCA = /etc/pki/tls/certs/upload_cacert.pem ClientCA = /etc/pki/tls/certs/upload_cacert.pem
KojiHubCA = /etc/pki/tls/certs/extras_cacert.pem KojiHubCA = /etc/pki/tls/certs/extras_cacert.pem