5b09e09c60
All our AFS release roles use "kinit" for authentication. The only scripts using k5start are the mirror scripts, but since that doesn't run on CentOS we don't need it there. This avoids us having to use EPEL or, on 8, an unsupported build. Anything needing to be portable should use kinit from now on. Change-Id: I6323cb835cedf9974cf8d96faa7eb55b8aaafd9a
24 lines
647 B
ReStructuredText
24 lines
647 B
ReStructuredText
An ansible role to configure a kerberos client
|
|
|
|
Note ```k5start`` is installed on Debuntu distributions, but is not
|
|
part of RedHat distributions.
|
|
|
|
**Role Variables**
|
|
|
|
.. zuul:rolevar:: kerberos_realm
|
|
|
|
The realm for Kerberos authentication. You must set the realm.
|
|
e.g. ``MY.COMPANY.COM``. This will be the default realm.
|
|
|
|
.. zuul:rolevar:: kerberos_admin_server
|
|
:default: {{ ansible_fqdn }}
|
|
|
|
The host where the administraion server is running. Typically this
|
|
is the master Kerberos server.
|
|
|
|
.. zuul:rolevar:: kerberos_kdcs
|
|
:default: [ {{ ansible_fqdn }} ]
|
|
|
|
A list of key distribution center (KDC) hostnames for the realm.
|
|
|