Aurélien Bompard
|
1000908288
|
Fixup the keytab thingy
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
|
2020-09-01 22:56:23 +02:00 |
|
Aurélien Bompard
|
392e547601
|
Support getting a host keytab from IPA
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
|
2020-09-01 22:42:56 +02:00 |
|
Aurélien Bompard
|
2e7ede1b71
|
Refactor the keytab/service role to prepare for more ipa roles
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
|
2020-08-20 15:11:56 +02:00 |
|
Patrick Uiterwijk
|
97234b1c83
|
Also add DNS check override for host check
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
|
2020-07-24 22:42:55 +02:00 |
|
Patrick Uiterwijk
|
7db1377081
|
Do not require hosts to be in the IPA DNS zone
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
|
2020-07-24 22:05:55 +02:00 |
|
Kevin Fenzi
|
3acd61b067
|
iad2: drop python2 for ipa. This means NO NEW keytabs made from phx2 ansible runs. Do those in iad2.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
|
2020-06-03 11:14:26 -07:00 |
|
Kevin Fenzi
|
f749bed45e
|
roles/keytab/service: Forgot one task for python2 setting.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
|
2019-07-08 19:26:16 +00:00 |
|
Kevin Fenzi
|
5edcaa7614
|
roles/keytab: switch back to specifying python2 here for delegations.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
|
2019-07-08 19:19:07 +00:00 |
|
Mikolaj Izdebski
|
179c1fd905
|
Allow fedmsg-hub to read bodhi keytab
|
2018-11-08 19:03:03 +00:00 |
|
Patrick Uiterwijk
|
4a6402394a
|
Make releng-team able to use releng keytab
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
|
2018-02-06 23:17:17 +00:00 |
|
Patrick Uiterwijk
|
d07d4320f9
|
We do not register host services
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
|
2016-12-08 19:10:35 +00:00 |
|
Kevin Fenzi
|
037647afed
|
adjust ipa playbook a bit more
|
2016-12-05 17:59:00 +00:00 |
|
Kevin Fenzi
|
37000ddda2
|
set check_mode: no on all the tasks that register variables to get the ipa playbooks working with check mode
|
2016-12-05 17:53:13 +00:00 |
|
Patrick Uiterwijk
|
29bc6303fe
|
Ansible has a bug where state=null becomes state=link, contrary to documentation
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
|
2016-11-27 22:57:34 +00:00 |
|
Patrick Uiterwijk
|
a6d0341568
|
IPA-client is no longer needed
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
|
2016-11-23 14:25:18 +00:00 |
|
|
|
246a37280f
|
keytab: add check for yum/dnf
|
2016-11-03 18:57:41 +00:00 |
|
Patrick Uiterwijk
|
819474bbe7
|
Decode and destroy the b64-encoded keytab
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
|
2016-11-03 13:19:45 +00:00 |
|
Patrick Uiterwijk
|
8559733dff
|
This is not supposed to register the keytab var
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
|
2016-11-03 13:17:35 +00:00 |
|
Patrick Uiterwijk
|
42b054c9f1
|
Use ipa-server based method for getting service keytabs
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
|
2016-11-03 13:16:03 +00:00 |
|
Patrick Uiterwijk
|
3bd10eaa0d
|
This needs to run for each box
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
|
2016-10-28 13:12:27 +00:00 |
|
Patrick Uiterwijk
|
b3c6a75de0
|
Default git hostname
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
|
2016-10-28 12:42:35 +00:00 |
|
Patrick Uiterwijk
|
a23e33183d
|
Always set file permissions
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
|
2016-10-28 12:02:19 +00:00 |
|
Patrick Uiterwijk
|
c94f4793ba
|
results != result
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
|
2016-10-28 12:01:12 +00:00 |
|
Patrick Uiterwijk
|
b99315759c
|
Turns out this goes into stderr
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
|
2016-10-28 11:59:16 +00:00 |
|
Patrick Uiterwijk
|
485965aaa8
|
Handle the case when no key was created yet
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
|
2016-10-28 11:58:16 +00:00 |
|
Patrick Uiterwijk
|
f408d9d3a2
|
Get and destroy host ticket
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
|
2016-10-28 11:48:03 +00:00 |
|
Patrick Uiterwijk
|
d2b239173e
|
Tag ipa-client install
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
|
2016-10-28 11:41:35 +00:00 |
|
Patrick Uiterwijk
|
070d815ae2
|
Fix check
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
|
2016-10-28 11:35:00 +00:00 |
|
Patrick Uiterwijk
|
3529e621ee
|
Add keytab/service role
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
|
2016-10-28 11:31:46 +00:00 |
|
