infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions

Use new keytabs for secondary kojis

Browse source 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
This commit is contained in:
Patrick Uiterwijk 2017-11-03 21:43:53 +00:00
parent 1108230512
commit af6a1915e2
1 changed files with 5 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

6
roles/koji_hub/templates/kojihub.conf.j2
View file

@ -29,7 +29,11 @@ Alias /kojifiles "/mnt/koji/"
GssapiSSLonly Off
GssapiLocalName On
AuthName "GSSAPI Single Sign On Login"
GssapiCredStore keytab:/etc/koji-hub/gssapi.keytab
{% if fedmsg_koji_instance == "primary" %}
GssapiCredStore keytab:/etc/koji-hub/gssapi.keytab
{% else %}
GssapiCredStore keytab:/etc/krb5.HTTP_{{ fedmsg_koji_instance }}.koji.fedoraproject.org.keytab
{% endif %}
Require valid-user
</Location>