Straighten out krb perms for the koji package list sync script.

2017-09-06 15:25:52 +00:00 · 2017-09-06 15:25:52 +00:00 · e4d091edb6
commit e4d091edb6
parent f65b852044
2 changed files with 5 additions and 0 deletions
--- a/playbooks/groups/bodhi-backend.yml
+++ b/playbooks/groups/bodhi-backend.yml
@ -46,6 +46,8 @@

  - role: keytab/service
    service: pkgdb
+    owner_user: fedmsg
+    owner_group: fedmsg
  - role: keytab/service
    owner_user: apache
    owner_group: apache
--- a/roles/bodhi2/backend/files/koji-sync-listener.service
+++ b/roles/bodhi2/backend/files/koji-sync-listener.service
@ -8,5 +8,8 @@ User=fedmsg
 Group=fedmsg
 Restart=on-failure

+# Use a different ccname so we don't share tickets with bodhi.
+Environment=KRB5CCNAME=/var/tmp/owner-sync-krbcc
+
 [Install]
 WantedBy=multi-user.target