On 01/26/2011 12:02 PM, [email protected] wrote: > Hey there. > > I think that I've got a working koji server authenticating using kerberos > (yea!). > > My latest issue is that I'm trying to call koji from another host using > the koji command-line client. I can get read-only commands, but > build submissions are failing:
You need to apply the same patch to __init__.py:_serverPrincipal() to set the domain (realm) to AUTH.BEATPORTCORP.NET as you did on the hub machine. This problem is fixed in Koji HEAD. > [[email protected] ~]$ koji -s > http://bpbuild001.co0.nar.beatportcorp.net/kojihub list-external-repos > External repo name URL > ------------------------- ---------------------------------------- > dist-EL5-beatport-external-repo-centos-updates-x86_64 > http://repo.beatportcorp.net/centos/5/updates/x86_64/ > dist-EL5-beatport-external-repo-centos-epel-x86_64 > http://repo.beatportcorp.net/epel/5/x86_64/ > dist-EL5-beatport-external-repo-centos-php_new53-x86_64 > http://repo.beatportcorp.net/php_new5.3/ > dist-EL5-beatport-external-repo-centos-updates-i386 > http://repo.beatportcorp.net/centos/5/updates/i386/ > dist-EL5-beatport-external-repo-centos-epel-i386 > http://repo.beatportcorp.net/epel/5/i386/ > dist-EL5-beatport-official-x86_64 > http://mirrors.kernel.org/centos/5/os/x86_64/ > dist-EL5-beatport-official-i386 http://mirrors.kernel.org/centos/5/os/i386/ > dist-EL5-beatport-external-repo-buildsys > http://buildsys.fedoraproject.org/buildgroups/rhel5/x86_64/ > [[email protected] ~]$ koji -s > http://bpbuild001.co0.nar.beatportcorp.net/kojihub build dist-EL5-beatport > cdrtools-2.01-10.7.el5.src.rpm > Kerberos authentication failed: Server not found in Kerberos database > (-1765328377) > > Here's the contents of my psql koji DB: > > ji=> select * from users; > id | name | password | status | usertype | > krb_principal > ----+-------------------------------------+----------+--------+----------+------------------------------------------------------------------- > 2 | swebb | | 0 | 0 | > [email protected] > 1 | koji | | 0 | 0 | > koji/[email protected] > 3 | kojira | | 0 | 0 | > 4 | bpbuild001.co0.nar.beatportcorp.net | | 0 | 1 | > compile/[email protected] > 5 | dharris | | 0 | 0 | > [email protected] > 6 | jsteffan | | 0 | 0 | > [email protected] > 7 | talexander | | 0 | 0 | > [email protected] > 8 | jhiza | | 0 | 0 | > [email protected] > 9 | taitken | | 0 | 0 | > [email protected] > 10 | ccardone | | 0 | 0 | > [email protected] > (10 rows) > > - Steve > -- buildsys mailing list [email protected] https://admin.fedoraproject.org/mailman/listinfo/buildsys
