WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-05-12 02:46:20 +08:00
Code Issues Packages Projects Releases Wiki Activity

Make IPA use the combined keytab

Browse Source 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
This commit is contained in:
Patrick Uiterwijk
2016-12-20 05:21:37 +00:00
parent ab40af84d1
commit 78261c632c
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
playbooks/groups/ipa.yml
View File

@@ -58,6 +58,14 @@
shell: printf "%b" "read_kt /etc/httpd/conf/ipa.keytab\nread_kt /etc/krb5.HTTP_id{{env_suffix}}.fedoraproject.org.keytab\nwrite_kt /etc/krb5.HTTP_id{{env_suffix}}.fedoraproject.org.keytab.combined" | ktutil
tags:
- krb5
- ipa/server
- name: Make IPA HTTP use the combined keytab
lineinfile: dest=/etc/httpd/conf.d/ipa.conf
regexp='GssapiCredStore keytab:'
line=' GssapiCredStore keytab:/etc/krb5.HTTP_id{{env_suffix}}.fedoraproject.org.keytab.combined'
tags:
- krb5
- ipa/server
- name: do base role once more to revert any resolvconf changes
hosts: ipa:ipa-stg