openstack/kolla
Code Issues Proposed changes

keystone: Switch from mod_auth_kerb to mod_auth_gssapi

Browse Source 
The packages needed for authentication using kerberos for keystone
landed in a recent patch [1]. Unfortunately, shortly after the patch
merging I was informed that the preferred module is mod_auth_gssapi
nowadays (given that there is a planned deprecation for mod_auth_kerb).

[1] I9ef972ea5a8e9cf4d1ed43ef27203576d9382822

Change-Id: I5f1aa4a959fd91b164a697e98e253fcab0fc1572
This commit is contained in:
Juan Antonio Osorio Robles 2018-05-24 14:52:35 +03:00
parent 380be0cb3e
commit df05a8b793
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
docker/keystone/keystone/Dockerfile.j2
View File

@ -13,12 +13,12 @@ RUN chmod 755 /usr/local/bin/kolla_extend_start /usr/local/bin/kolla_keystone_bo
# TODO: oraclelinux fails to install these packages. Should be added when this is fixed.
{% if base_distro in ['centos', 'rhel'] %}
{% set keystone_packages = [
'mod_auth_kerb',
'mod_auth_gssapi',
'python-requests-kerberos',
] %}
{% elif base_distro in ['debian', 'ubuntu'] %}
{% set keystone_packages = [
'libapache2-mod-auth-kerb',
'libapache2-mod-auth-gssapi',
'python-requests-kerberos',
] %}
{% endif %}
@ -26,11 +26,11 @@ RUN chmod 755 /usr/local/bin/kolla_extend_start /usr/local/bin/kolla_keystone_bo
{% elif install_type == 'source' %}
{% if base_distro in ['centos', 'rhel'] %}
{% set keystone_packages = [
'mod_auth_kerb',
'mod_auth_gssapi',
] %}
{% elif base_distro in ['debian', 'ubuntu'] %}
{% set keystone_packages = [
'libapache2-mod-auth-kerb',
'libapache2-mod-auth-gssapi',
] %}
{% endif %}
{{ macros.install_packages(keystone_packages | customizable("packages")) }}