From 0d40ff3e92c439a1b511d0fd25e47b6dd82fed1f Mon Sep 17 00:00:00 2001
From: Timo Makinen <tmakinen@foo.sh>
Date: Tue, 17 Nov 2020 16:49:21 +0000
Subject: [PATCH] nfs-client: Allow gssproxy to connect krb5 over https

---
 roles/nfs-client/tasks/main.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/roles/nfs-client/tasks/main.yml b/roles/nfs-client/tasks/main.yml
index 909aa7c..2a09463 100644
--- a/roles/nfs-client/tasks/main.yml
+++ b/roles/nfs-client/tasks/main.yml
@@ -10,6 +10,12 @@
     regexp: '^#?Domain\s*=.*'
     line: "Domain = {{ mail_domain }}"
 
+- name: allow gssproxy to connect kerberos servers over https
+  seboolean:
+    name: nis_enabled
+    state: true
+    persistent: true
+
 - name: enable rpc-gssd services
   service:
     name: rpc-gssd