-
Notifications
You must be signed in to change notification settings - Fork 270
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Fixes #32947 - Use Apache module variables #968
Conversation
@@ -3,7 +3,7 @@ | |||
SSLRequireSSL | |||
AuthType GSSAPI | |||
AuthName "GSSAPI Single Sign On Login" | |||
GssapiCredStore keytab:<%= scope.lookupvar('foreman::http_keytab') %> | |||
GssapiCredStore keytab:<%= @http_keytab %> |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I was about to say that this should have broken
.with_ssl_content(%r{^\s*GssapiCredStore keytab:/etc/httpd/conf/http.keytab$}) |
But we don't test this on Debian at all…
context "on #{os}", if: facts[:osfamily] == 'RedHat' do |
Mind adding tests? :)
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I took the liberty of pushing some simple tests now ;)
Apache is packaged in different locations between Red Hat and Debian. The user differs (apache vs www-data) and conf dir (/etc/httpd vs /etc/apache2). This changes the code to use variables already defined on the apache module to avoid duplicating this logic.
6b08717
to
f9cafdc
Compare
I can't approve my own PR, but 👍 and thanks for fixing the tests. |
@tbrisker how noteworthy do you find that Debian can now use Kerberos auth too? :) |
Perhaps we can capture it together in "Kerberos is now available on EL8 and Debian" |
Makes sense to add a headline feature regarding the switch to gssapi and its availability on all distros |
and now i see you already did that ^_^ |
Yupp. And now also explicitly added Debian/Ubuntu in theforeman/theforeman.org#1858 |
Apache is packaged in different locations between Red Hat and Debian. The user differs (apache vs www-data) and conf dir (/etc/httpd vs /etc/apache2). This changes the code to use variables already defined on the apache module to avoid duplicating this logic.