Skip to content
Snippets Groups Projects
Commit 703ee1c9 authored by Rafael Guterres Jeffman's avatar Rafael Guterres Jeffman
Browse files

Fixes usage of Kerberos credentials on Vault module.

Even after obtaining Kerberos TGT with temp_kinit(), when connecting to
the IPA API with context `ansible-freeipa`, the API commands complained
that Kerberos credentials were not available. This patch fixes this
behavior.
parent 28972674
No related branches found
No related tags found
No related merge requests found
......@@ -463,6 +463,9 @@ def main():
if not valid_creds(ansible_module, ipaadmin_principal):
ccache_dir, ccache_name = temp_kinit(ipaadmin_principal,
ipaadmin_password)
# Need to set krb5 ccache name, due to context='ansible-freeipa'
if ccache_name is not None:
os.environ["KRB5CCNAME"] = ccache_name
api_connect(context='ansible-freeipa')
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment