From 6ad3d6d3f32ec5a98ca49b4450690769dd556f17 Mon Sep 17 00:00:00 2001
From: Julien Leduc <julien.leduc@cern.ch>
Date: Wed, 22 Nov 2017 11:28:55 +0100
Subject: [PATCH] Adding the real command line and some related xrootd
 configuration

---
 .../docker/ctafrontend/cc7/opt/run/bin/ctaeos-mgm.sh         | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/continuousintegration/docker/ctafrontend/cc7/opt/run/bin/ctaeos-mgm.sh b/continuousintegration/docker/ctafrontend/cc7/opt/run/bin/ctaeos-mgm.sh
index 8efec1fb1d..16e05947a0 100755
--- a/continuousintegration/docker/ctafrontend/cc7/opt/run/bin/ctaeos-mgm.sh
+++ b/continuousintegration/docker/ctafrontend/cc7/opt/run/bin/ctaeos-mgm.sh
@@ -62,8 +62,9 @@ EOF
 # prepare eos startup
   # skip systemd for eos initscripts
     export SYSTEMCTL_SKIP_REDIRECT=1
-#  echo y | xrdsssadmin -k ${EOS_INSTANCE} -u daemon -g daemon add /etc/eos.keytab
-# need a deterministic key for taped
+#  echo y | xrdsssadmin -k ${EOS_INSTANCE}+ -u daemon -g daemon add /etc/eos.keytab
+# need a deterministic key for taped and it must be forwardable in case of kubernetes
+# see [here](http://xrootd.org/doc/dev47/sec_config.htm#_Toc489606587)
 # can only have one key????
 echo -n '0 u:daemon g:daemon n:ctaeos+ N:6361884315374059521 c:1481241620 e:0 f:0 k:1a08f769e9c8e0c4c5a7e673247c8561cd23a0e7d8eee75e4a543f2d2dd3fd22' > /etc/eos.keytab 
     chmod 400 /etc/eos.keytab
-- 
GitLab