Bug #32947
IPA Authentication is not properly deployed on Debian
Difficulty:
Triaged:
No
Description
Associated revisions
Refs #32947 - add tests for the Debian keytab path
History
#1
Updated by Evgeni Golov over 1 year ago
Updated by root@debian10-foreman-2-5:~# KRB5CCNAME=KEYRING:session:get-http-service-keytab kinit -k kinit: Cannot determine realm for host (principal host/debian10-foreman-2-5@)
not sure if that's my install, but it fails to find the right realm/principal
root@debian10-foreman-2-5:~# KRB5CCNAME=KEYRING:session:get-http-service-keytab kinit -k host/debian10-foreman-2-5.yatsu.example.com@YATSU.EXAMPLE.COM
works fine, but tht's not what our code executes… :(
#2
Updated by The Foreman Bot over 1 year ago
Updated by - Status changed from New to Ready For Testing
- Pull request https://github.com/theforeman/puppet-foreman/pull/968 added
#3
Updated by The Foreman Bot over 1 year ago
- Fixed in Releases 3.0.0 added
#4
Updated by Ewoud Kohl van Wijngaarden over 1 year ago
Updated by - Status changed from Ready For Testing to Closed
Applied in changeset puppet-foreman|d8879affac6abe8254765a2e27661816b34bc5f0.
Fixes #32947 - Use Apache module variables
Apache is packaged in different locations between Red Hat and Debian.
The user differs (apache vs www-data) and conf dir (/etc/httpd vs
/etc/apache2). This changes the code to use variables already defined on
the apache module to avoid duplicating this logic.