summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorPatrick Uiterwijk <puiterwijk@redhat.com>2017-04-18 02:26:36 +0000
committerPatrick Uiterwijk <puiterwijk@redhat.com>2017-04-18 02:26:36 +0000
commitfca9819f8aa3fd401134d9747fa85d816aa17e78 (patch)
treede1bf28fd8b7ec78a307b8b4775a5306dac3e661
parent36f735c243d1d3f6361e885054884f125ace19e0 (diff)
downloadansible-fca9819f8aa3fd401134d9747fa85d816aa17e78.tar.gz
ansible-fca9819f8aa3fd401134d9747fa85d816aa17e78.tar.xz
ansible-fca9819f8aa3fd401134d9747fa85d816aa17e78.zip
No longer depend on reverse DNS for keytab entry decision
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
-rw-r--r--roles/koji_builder/templates/kojid.conf2
1 files changed, 1 insertions, 1 deletions
diff --git a/roles/koji_builder/templates/kojid.conf b/roles/koji_builder/templates/kojid.conf
index 4e97f6c43..e1594b932 100644
--- a/roles/koji_builder/templates/kojid.conf
+++ b/roles/koji_builder/templates/kojid.conf
@@ -77,7 +77,7 @@ from_addr=Fedora Koji Build System <buildsys@fedoraproject.org>
serverca = /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
; Kerberos configuration
-host_principal_format = compile/%s@{{ ipa_realm }}
+krb_principal = compile/{{ inventory_hostname }}@{{ ipa_realm }}
keytab = /etc/kojid/kojid.keytab
krbservice = host
krb_rdns = false