[Ovirt-devel] [PATCH recipe] More hatch battening
Ian Main
imain at redhat.com
Fri Feb 6 04:20:18 UTC 2009
Also add these files to the recipe for now so it continues to work.
Signed-off-by: Ian Main <imain at redhat.com>
---
appliances/ovirt/files/qpidd.conf | 7 +------
appliances/ovirt/files/sasl2_qpidd.conf | 5 ++---
2 files changed, 3 insertions(+), 9 deletions(-)
diff --git a/appliances/ovirt/files/qpidd.conf b/appliances/ovirt/files/qpidd.conf
index bf80918..4480460 100644
--- a/appliances/ovirt/files/qpidd.conf
+++ b/appliances/ovirt/files/qpidd.conf
@@ -2,10 +2,5 @@
# name = value
# Using default settings: "qpidd --help" or "man qpidd" for more details.
-
-# This is where we want to be, but we can't actually do that yet because
-# we have unencrypted db-omatic and taskomatic running over localhost.
-# This will change shortly once we have gssapi support for ruby.
-#
-#require-encryption
+require-encryption
diff --git a/appliances/ovirt/files/sasl2_qpidd.conf b/appliances/ovirt/files/sasl2_qpidd.conf
index c61131f..e5c4143 100644
--- a/appliances/ovirt/files/sasl2_qpidd.conf
+++ b/appliances/ovirt/files/sasl2_qpidd.conf
@@ -40,8 +40,7 @@ pwcheck_method: auxprop
auxprop_plugin: sasldb
sasldb_path: /var/lib/qpidd/qpidd.sasldb
-# For now we allow plain auth too because the local daemons do not yet
-# support kerberos.
-mech_list: gssapi plain
+# Only allow GSSAPI
+mech_list: gssapi
keytab: /usr/share/ovirt-server/ovirt.keytab
--
1.6.0.4
More information about the ovirt-devel
mailing list