particle-os/debian-koji
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

remove deprecated krbV support

Browse source 
Fixes: https://pagure.io/koji/issue/1991
This commit is contained in:
Tomas Kopecek 2020-05-13 16:36:32 +02:00 • committed by Mike McLean
parent ee93da4177
commit f8419e3626
25 changed files with 30 additions and 552 deletions
Download patch file Download diff file Expand all files Collapse all files

21
docs/source/kojid_conf.rst
View file

@ -242,27 +242,6 @@ Kerberos Authentication
keytab=/etc/kojid/kojid.keytab
Location of the keytab.
krb_canon_host=False
Kerberos authentication requires correct hostnames. If this option is
specified, dns is used to get the correct hostname for the
server (i.e. resolve any CNAMEs). Note, this option will not function
unless ``python-dns`` is installed.
The ``krb_rdns`` option takes a different approach.
krb_principal=None
Explicit principal used for login. If it is not specified, it is
created via ``host_principal_format``.
krb_rdns=True
Kerberos authentication needs correct hostname. If this option is
specified, ``socket.getfqdn(host)`` is used to determine reverse DNS
records. Otherwise, ``host`` is used directly. Playing with this option
can help you in some firewalled setups. ``krb_canon_host`` takes
precedence over this option and takes a different approach.
krbservice=host
The service name of the principal being used by the hub.
SSL Authentication
^^^^^^^^^^^^^^^^^^

11
docs/source/server_howto.rst
View file

@ -883,11 +883,6 @@ For a simple test, all we need is the ``server`` and authentication sections.
;path to the koji top directory
topdir = /mnt/koji
; configuration for Kerberos authentication
;the service name of the principal being used by the hub
;krbservice = host
; configuration for SSL athentication
;client certificate
@ -1351,12 +1346,6 @@ Authentication Configuration
;location of the keytab
;keytab = /etc/kojira/kojira.keytab
;the service name of the principal being used by the hub
;krbservice = host
;The realm of server principal. Using client's realm if not set
;krb_server_realm = EXAMPLE.COM
``/etc/sysconfig/kojira``
The local user kojira runs as needs to be able to read and write to
``/mnt/koji/repos/``. If the volume that directory resides on is