eea730300aadded a dedicated section for Kerberos authentication to kojira.conf. It refers to the canonical location /etc/kojira/kojira.keytab. Prior to this change, there were two "kerberos" sections in kojira.conf. Remove the older stale one, since that refers to the old "/etc/kojira.keytab" file path, andf232e49194defaults to /etc/kojira/kojira.keytab instead.
54 lines
1.4 KiB
Text
54 lines
1.4 KiB
Text
[kojira]
|
|
; For user/pass authentication
|
|
; user=kojira
|
|
; password=kojira
|
|
|
|
; The URL for the koji hub server
|
|
server=http://hub.example.com/kojihub
|
|
|
|
; The directory containing the repos/ directory
|
|
topdir=/mnt/koji
|
|
|
|
; Logfile
|
|
logfile=/var/log/kojira.log
|
|
|
|
;configuration for Kerberos authentication
|
|
|
|
;the kerberos principal to use
|
|
;principal = kojira@EXAMPLE.COM
|
|
|
|
;location of the keytab
|
|
;keytab = /etc/kojira/kojira.keytab
|
|
|
|
;the service name of the principal being used by the hub
|
|
;krbservice = host
|
|
|
|
;The realm of server principal. Using client's realm if not set
|
|
;krb_server_realm = EXAMPLE.COM
|
|
|
|
;configuration for SSL authentication
|
|
|
|
;client certificate
|
|
;cert = /etc/kojira/client.crt
|
|
|
|
;certificate of the CA that issued the HTTP server certificate
|
|
;serverca = /etc/kojira/serverca.crt
|
|
|
|
;how soon (in seconds) to clean up expired repositories. 1 week default
|
|
;deleted_repo_lifetime = 604800
|
|
|
|
;how soon (in seconds) to clean up dist repositories. 1 week default here too
|
|
;dist_repo_lifetime = 604800
|
|
|
|
;turn on debugging statements in the log
|
|
;debug = false
|
|
|
|
; ignored repositories according to glob. Multiple masks separated by space.
|
|
; ignore_tags =
|
|
|
|
|
|
; Monitor external repos and trigger the appropriate Koji repo regenerations
|
|
; when they change. Note that you need to have your database set to use UTC,
|
|
; as otherwise you can end with weird behaviour. For details see
|
|
; https://pagure.io/koji/issue/2159
|
|
; check_external_repos = false
|