From 5c33c6d6ea026c21ce6551925d039b032c02e907 Mon Sep 17 00:00:00 2001
From: Patrick Uiterwijk <patrick@puiterwijk.org>
Date: Thu, 9 May 2019 17:10:34 +0200
Subject: [PATCH] ipsilon: update keytab path for openshift

Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
---
 roles/ipsilon/templates/ipsilon-httpd.conf.j2 | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/roles/ipsilon/templates/ipsilon-httpd.conf.j2 b/roles/ipsilon/templates/ipsilon-httpd.conf.j2
index 7d9f65bae8..a2b1e72370 100644
--- a/roles/ipsilon/templates/ipsilon-httpd.conf.j2
+++ b/roles/ipsilon/templates/ipsilon-httpd.conf.j2
@@ -31,11 +31,7 @@ WSGIRestrictSignal Off
 
 <Location /login/gssapi/negotiate>
     AuthName "GSSAPI Single Sign On Login"
-{% if env == "staging" %}
-    GssapiCredStore keytab:/etc/krb5.HTTP_id.stg.fedoraproject.org.keytab
-{% else %}
-    GssapiCredStore keytab:/etc/krb5.HTTP_id.fedoraproject.org.keytab
-{% endif %}
+    GssapiCredStore keytab:/etc/keytabs/ipsilon-keytab
     AuthType GSSAPI
     # This is off because Apache (and thus mod_auth_gssapi) doesn't know this is proxied over TLS
     GssapiSSLonly Off