Project

General

Profile

Bug #32947

IPA Authentication is not properly deployed on Debian

Added by Evgeni Golov 3 months ago. Updated about 2 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Category:
Foreman modules
Target version:
-
Difficulty:
Triaged:
No
Bugzilla link:

Associated revisions

Revision d8879aff (diff)
Added by Ewoud Kohl van Wijngaarden 3 months ago

Fixes #32947 - Use Apache module variables

Apache is packaged in different locations between Red Hat and Debian.
The user differs (apache vs www-data) and conf dir (/etc/httpd vs
/etc/apache2). This changes the code to use variables already defined on
the apache module to avoid duplicating this logic.

Revision b759778b (diff)
Added by Evgeni Golov 3 months ago

Refs #32947 - add tests for the Debian keytab path

History

#1 Updated by Evgeni Golov 3 months ago

root@debian10-foreman-2-5:~# KRB5CCNAME=KEYRING:session:get-http-service-keytab kinit -k 
kinit: Cannot determine realm for host (principal host/debian10-foreman-2-5@)

not sure if that's my install, but it fails to find the right realm/principal

root@debian10-foreman-2-5:~# KRB5CCNAME=KEYRING:session:get-http-service-keytab kinit -k host/debian10-foreman-2-5.yatsu.example.com@YATSU.EXAMPLE.COM

works fine, but tht's not what our code executes… :(

#2 Updated by The Foreman Bot 3 months ago

  • Status changed from New to Ready For Testing
  • Pull request https://github.com/theforeman/puppet-foreman/pull/968 added

#3 Updated by The Foreman Bot 3 months ago

  • Fixed in Releases 3.0.0 added

#4 Updated by Ewoud Kohl van Wijngaarden 3 months ago

  • Status changed from Ready For Testing to Closed

Also available in: Atom PDF