infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions

Using API at id.fp.o broke

Browse source 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
This commit is contained in:
Patrick Uiterwijk 2017-08-10 17:43:51 +02:00
parent 1f1f175c9a
commit afd0a590f9
1 changed files with 16 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

32
playbooks/groups/ipa.yml
View file

@ -69,22 +69,22 @@
- krb5
- ipa/server
# original: /etc/httpd/conf/ipa.keytab
- name: Make IPA HTTP use the combined keytab
lineinfile: dest=/etc/httpd/conf.d/ipa.conf
regexp='GssapiCredStore keytab:'
line=' GssapiCredStore keytab:/etc/krb5.HTTP_id{{env_suffix}}.fedoraproject.org.keytab.combined'
tags:
- krb5
- ipa/server
- config
- name: Make IPA HTTP use the id.fp.o client keytab
lineinfile: dest=/etc/httpd/conf.d/ipa.conf
regexp='GssapiCredStore client_keytab:'
line=' GssapiCredStore client_keytab:/etc/krb5.HTTP_id{{env_suffix}}.fedoraproject.org.keytab'
tags:
- krb5
- ipa/server
- config
#- name: Make IPA HTTP use the combined keytab
# lineinfile: dest=/etc/httpd/conf.d/ipa.conf
# regexp='GssapiCredStore keytab:'
# line=' GssapiCredStore keytab:/etc/krb5.HTTP_id{{env_suffix}}.fedoraproject.org.keytab.combined'
# tags:
# - krb5
# - ipa/server
# - config
#- name: Make IPA HTTP use the id.fp.o client keytab
# lineinfile: dest=/etc/httpd/conf.d/ipa.conf
# regexp='GssapiCredStore client_keytab:'
# line=' GssapiCredStore client_keytab:/etc/krb5.HTTP_id{{env_suffix}}.fedoraproject.org.keytab'
# tags:
# - krb5
# - ipa/server
# - config
- name: do base role once more to revert any resolvconf changes
hosts: ipa:ipa-stg