tmakinen/puppet
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

kerberos: Added support to kerberos::client for resolving kdc servers using DNS SRV records.

Browse source
This commit is contained in:
Timo Makinen 2014-01-22 15:41:54 +02:00
parent c38f5985f5
commit e3383a2433
2 changed files with 20 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

8
kerberos/templates/krb5.conf.erb
View file

@ -1,7 +1,11 @@
[libdefaults]
default_realm = <%= @kerberos_realm %>
dns_lookup_realm = false
<% if @kerberos_kdc.count == 0 -%>
dns_lookup_kdc = true
<% else -%>
dns_lookup_kdc = false
<% end -%>
ticket_lifetime = 24h
forwardable = yes
@ -14,7 +18,9 @@
<% @kerberos_kdc.each do |kdc| -%>
kdc = <%= kdc %>
<% end -%>
admin_server = <% if @kerberos_kadmin %><%= @kerberos_kadmin %><% else %><%= @kerberos_kdc[0] %><% end %>
<% if @kerberos_kadmin -%>
admin_server = <%= @kerberos_kadmin %>
<% end -%>
<% if @kerberos_kpasswd -%>
kpasswd_server = <%= @kerberos_kpasswd %>
<% end -%>