From 26649ff8ca7c81486e2a8baedc6f88eef2c6e686 Mon Sep 17 00:00:00 2001 From: Julien Leduc <julien.leduc@cern.ch> Date: Mon, 13 Nov 2017 13:02:17 +0100 Subject: [PATCH] Using /etc/cta/cta-frontend.krb5.keytab file as ctafrontend kerberos keytab instead of /etc/cta-frontend.krb5.keytab --- .../cc7/config/ctafrontend/etc/cta/cta-frontend-xrootd.conf | 2 +- .../docker/ctafrontend/cc7/opt/run/bin/ctafrontend.sh | 4 ++-- continuousintegration/orchestration/create_instance.sh | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/continuousintegration/docker/ctafrontend/cc7/config/ctafrontend/etc/cta/cta-frontend-xrootd.conf b/continuousintegration/docker/ctafrontend/cc7/config/ctafrontend/etc/cta/cta-frontend-xrootd.conf index 804c13f8e4..f5981be0b0 100644 --- a/continuousintegration/docker/ctafrontend/cc7/config/ctafrontend/etc/cta/cta-frontend-xrootd.conf +++ b/continuousintegration/docker/ctafrontend/cc7/config/ctafrontend/etc/cta/cta-frontend-xrootd.conf @@ -18,7 +18,7 @@ xrootd.seclib libXrdSec.so # Protocol specification # The xroot server process needs to be able to read the keytab file -sec.protocol krb5 /etc/cta-frontend.krb5.keytab cta/cta-frontend@TEST.CTA +sec.protocol krb5 /etc/cta/cta-frontend.krb5.keytab cta/cta-frontend@TEST.CTA sec.protocol sss -s /etc/ctafrontend_SSS_s.keytab -c /etc/ctafrontend_SSS_c.keytab #sec.protocol unix diff --git a/continuousintegration/docker/ctafrontend/cc7/opt/run/bin/ctafrontend.sh b/continuousintegration/docker/ctafrontend/cc7/opt/run/bin/ctafrontend.sh index 148ad17069..7c8ce9e889 100755 --- a/continuousintegration/docker/ctafrontend/cc7/opt/run/bin/ctafrontend.sh +++ b/continuousintegration/docker/ctafrontend/cc7/opt/run/bin/ctafrontend.sh @@ -39,8 +39,8 @@ chmod 600 /etc/ctafrontend_SSS_s.keytab /etc/ctafrontend_SSS_c.keytab chown cta /etc/ctafrontend_SSS_s.keytab /etc/ctafrontend_SSS_c.keytab # Wait for the keytab file to be pushed in by the creation script. -echo -n "Waiting for /etc/cta-frontend.krb5.keytab" -for ((;;)); do test -e /etc/cta-frontend.krb5.keytab && break; sleep 1; echo -n .; done +echo -n "Waiting for /etc/cta/cta-frontend.krb5.keytab" +for ((;;)); do test -e /etc/cta/cta-frontend.krb5.keytab && break; sleep 1; echo -n .; done echo OK echo "Generating core file in /var/log/cta directory so that those are available as artifacts" diff --git a/continuousintegration/orchestration/create_instance.sh b/continuousintegration/orchestration/create_instance.sh index 28f5110ef7..a1f37ac88d 100755 --- a/continuousintegration/orchestration/create_instance.sh +++ b/continuousintegration/orchestration/create_instance.sh @@ -245,7 +245,7 @@ kubectl --namespace=${instance} exec kdc cat /etc/krb5.conf | kubectl --namespac kubectl --namespace=${instance} exec kdc cat /etc/krb5.conf | kubectl --namespace=${instance} exec -i ctaeos -- bash -c "cat > /etc/krb5.conf" kubectl --namespace=${instance} exec kdc cat /root/ctaadmin1.keytab | kubectl --namespace=${instance} exec -i ctacli -- bash -c "cat > /root/ctaadmin1.keytab" kubectl --namespace=${instance} exec kdc cat /root/user1.keytab | kubectl --namespace=${instance} exec -i client -- bash -c "cat > /root/user1.keytab" -kubectl --namespace=${instance} exec kdc cat /root/cta-frontend.keytab | kubectl --namespace=${instance} exec -i ctafrontend -- bash -c "cat > /etc/cta-frontend.krb5.keytab" +kubectl --namespace=${instance} exec kdc cat /root/cta-frontend.keytab | kubectl --namespace=${instance} exec -i ctafrontend -- bash -c "cat > /etc/cta/cta-frontend.krb5.keytab" kubectl --namespace=${instance} exec kdc cat /root/eos-server.keytab | kubectl --namespace=${instance} exec -i ctaeos -- bash -c "cat > /etc/eos-server.krb5.keytab" kubectl --namespace=${instance} exec ctacli -- kinit -kt /root/ctaadmin1.keytab ctaadmin1@TEST.CTA kubectl --namespace=${instance} exec client -- kinit -kt /root/user1.keytab user1@TEST.CTA -- GitLab