infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions

ipsilon: update keytab path for openshift

Browse source 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
This commit is contained in:
Patrick Uiterwijk 2019-05-09 17:10:34 +02:00
parent 7034db58e3
commit 5c33c6d6ea
1 changed files with 1 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

6
roles/ipsilon/templates/ipsilon-httpd.conf.j2
View file

@ -31,11 +31,7 @@ WSGIRestrictSignal Off
<Location /login/gssapi/negotiate> <Location /login/gssapi/negotiate>
AuthName "GSSAPI Single Sign On Login" AuthName "GSSAPI Single Sign On Login"
{% if env == "staging" %} GssapiCredStore keytab:/etc/keytabs/ipsilon-keytab
GssapiCredStore keytab:/etc/krb5.HTTP_id.stg.fedoraproject.org.keytab
{% else %}
GssapiCredStore keytab:/etc/krb5.HTTP_id.fedoraproject.org.keytab
{% endif %}
AuthType GSSAPI AuthType GSSAPI
# This is off because Apache (and thus mod_auth_gssapi) doesn't know this is proxied over TLS # This is off because Apache (and thus mod_auth_gssapi) doesn't know this is proxied over TLS
GssapiSSLonly Off GssapiSSLonly Off