Use local anchor when armoring password requests

https://pagure.io/freeipa/issue/6830

Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Jan Cholasta <jcholast@redhat.com>
Reviewed-By: Martin Basti <mbasti@redhat.com>
Reviewed-By: Simo Sorce <ssorce@redhat.com>
This commit is contained in:
Martin Babinsky
2017-03-31 15:15:50 +02:00
committed by Jan Cholasta
parent 68c6a4d4e1
commit 2374b648d0

View File

@@ -944,7 +944,7 @@ class login_password(Backend, KerberosSession):
self.debug('Obtaining armor in ccache %s', armor_path)
try:
kinit_armor(armor_path)
kinit_armor(armor_path, pkinit_anchor=paths.CACERT_PEM)
except RuntimeError as e:
self.error("Failed to obtain armor cache")
# We try to continue w/o armor, 2FA will be impacted