dustin
/
configpolicy
1
1
Fork 0
Code Issues Releases Activity

roles/samba-dc: Fix typo in host principal name 

The service principal name added to `/etc/krb5.keytab` had a trailing
`}` character because of a typo in the Ansible task. This resulted in
GSSAPI authentication failing because server processes could not find
the host key in the key table.
jenkins-master
Dustin 2018-04-08 10:50:51 -05:00
parent fff486ca03
commit 984628cbbc
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
roles/samba-dc/tasks/main.yml
View File

@ -89,5 +89,5 @@
- name: ensure host keytab exists - name: ensure host keytab exists
command: >- command: >-
samba-tool domain exportkeytab /etc/krb5.keytab samba-tool domain exportkeytab /etc/krb5.keytab
--principal=host/{{ ansible_fqdn }}} --principal=host/{{ ansible_fqdn }}
creates=/etc/krb5.keytab creates=/etc/krb5.keytab