internet/ansible-freeipa
4
0
Fork 0
mirror of https://github.com/freeipa/ansible-freeipa.git synced 2026-07-31 20:04:45 +00:00
Code Issues Projects Releases Wiki Activity

Fixes usage of Kerberos credentials on Vault module.

Browse Source 
Even after obtaining Kerberos TGT with temp_kinit(), when connecting to
the IPA API with context `ansible-freeipa`, the API commands complained
that Kerberos credentials were not available. This patch fixes this
behavior.
This commit is contained in:
Rafael Guterres Jeffman
2020-05-04 15:35:15 -03:00
parent 2897267440
commit 703ee1c9cd
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
plugins/modules/ipavault.py
View File

@@ -463,6 +463,9 @@ def main():
if not valid_creds(ansible_module, ipaadmin_principal): if not valid_creds(ansible_module, ipaadmin_principal):
ccache_dir, ccache_name = temp_kinit(ipaadmin_principal, ccache_dir, ccache_name = temp_kinit(ipaadmin_principal,
ipaadmin_password) ipaadmin_password)
# Need to set krb5 ccache name, due to context='ansible-freeipa'
if ccache_name is not None:
os.environ["KRB5CCNAME"] = ccache_name
api_connect(context='ansible-freeipa') api_connect(context='ansible-freeipa')