From: Michael Tremer <michael.tremer@ipfire.org>
Date: Mon, 10 Oct 2022 10:41:00 +0000 (+0000)
Subject: daemon: Authenticate against the hub using Kerberos
X-Git-Tag: 0.9.28~260
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=35cbea4e3d56980f0105b23eea7c99399b22b52c;p=pakfire.git

daemon: Authenticate against the hub using Kerberos

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/contrib/config/daemon.conf b/contrib/config/daemon.conf
index 143a7f6d5..41569ad25 100644
--- a/contrib/config/daemon.conf
+++ b/contrib/config/daemon.conf
@@ -5,10 +5,5 @@
 # The URL of the server to connect to.
 # server = https://pakfirehub.ipfire.org/
 
-# The hostname of this machine.
-# hostname = <automatically detected>
-
-# The authentication secret that is used
-# to identify this host against the pakfire
-# build service.
-# secret = 1234...
+# The keytab file that is being used to authenticate against the Hub
+# keytab = /etc/krb5.keytab
diff --git a/src/pakfire/daemon.py b/src/pakfire/daemon.py
index dfa0e54e5..a6bb9ff47 100644
--- a/src/pakfire/daemon.py
+++ b/src/pakfire/daemon.py
@@ -47,14 +47,10 @@ class Daemon(object):
 		url = self.config.get("daemon", "server", PAKFIRE_HUB)
 
 		# Host Credentials
-		hostname = self.config.get("daemon", "hostname", socket.gethostname())
-		password = self.config.get("daemon", "secret")
-
-		if not hostname or not password:
-			raise RuntimeError("Host credentials are not set")
+		keytab = self.config.get("daemon", "keytab", None)
 
 		# Create connection to the hub
-		return hub.Hub(url, hostname, password)
+		return hub.Hub(url, keytab=keytab)
 
 	async def run(self):
 		"""