Dne 20.11.2016 v 02:11 Dennis Gilmore napsal(a):
koji authentication will be switching to Kerberos. Koji supports
multiple
authentication mechanisms. Fedora infrastructure has set up a freeipa instance
internally that has credential syncing to fas. We are working on ensuring that
gssapi caching is supported so that you can have multiple TGT's and the
ability to work in multiple reams at once.
So what is the status here? Can you elaborate? It does not look like I
can use this now. E.g. this works:
```
$ kinit vondruch(a)FEDORAPROJECT.ORG
Password for vondruch(a)FEDORAPROJECT.ORG:
$ fedpkg scratch-build
Your git configuration does not use a namespace.
Consider updating your git configuration by running:
git remote set-url origin ssh://vondruch@pkgs.fedoraproject.org/rpms/ruby
Building ruby-2.2.6-50.fc23 for f23-candidate
Created task: 16551355
```
But using another TGT does not:
```
$ kinit vondruch(a)REDHAT.COM
Password for vondruch(a)REDHAT.COM:
$ klist -A
Ticket cache: KEYRING:persistent:16025:krb_ccache_GGcdkLO
Default principal: vondruch(a)REDHAT.COM
Valid starting Expires Service principal
21.11.2016 10:29:22 21.11.2016 20:29:22 krbtgt/REDHAT.COM(a)REDHAT.COM
Ticket cache: KEYRING:persistent:16025:krb_ccache_Bq2ZU0r
Default principal: vondruch(a)FEDORAPROJECT.ORG
Valid starting Expires Service principal
21.11.2016 10:29:04 22.11.2016 10:28:55
host/koji.fedoraproject.org(a)FEDORAPROJECT.ORG
renew until 28.11.2016 10:28:55
21.11.2016 10:28:59 22.11.2016 10:28:55
krbtgt/FEDORAPROJECT.ORG(a)FEDORAPROJECT.ORG
renew until 28.11.2016 10:28:55
$ fedpkg scratch-build
Your git configuration does not use a namespace.
Consider updating your git configuration by running:
git remote set-url origin ssh://vondruch@pkgs.fedoraproject.org/rpms/ruby
Could not execute scratch_build: (-1765328377, 'Server not found in
Kerberos database')
```
BTW it would be nice, if it works with SSSD somehow and I don't need to
use kinit at all.
Vít