WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-04-23 18:10:17 +08:00
Code Issues Packages Projects Releases Wiki Activity

ipsilon: update keytab path for openshift

Browse Source 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
This commit is contained in:
Patrick Uiterwijk
2019-05-09 17:10:34 +02:00
parent 7034db58e3
commit 5c33c6d6ea
1 changed files with 1 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
roles/ipsilon/templates/ipsilon-httpd.conf.j2
View File

@@ -31,11 +31,7 @@ WSGIRestrictSignal Off
<Location /login/gssapi/negotiate>
AuthName "GSSAPI Single Sign On Login"
{% if env == "staging" %}
GssapiCredStore keytab:/etc/krb5.HTTP_id.stg.fedoraproject.org.keytab
{% else %}
GssapiCredStore keytab:/etc/krb5.HTTP_id.fedoraproject.org.keytab
{% endif %}
GssapiCredStore keytab:/etc/keytabs/ipsilon-keytab
AuthType GSSAPI
# This is off because Apache (and thus mod_auth_gssapi) doesn't know this is proxied over TLS
GssapiSSLonly Off