Removed optional ssl client verification (caused errors)

example42 · Mar 12, 2014 · 9e331f3 · 9e331f3
1 parent 33f0fca
commit 9e331f3
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/manifests/server.pp b/manifests/server.pp
@@ -28,7 +28,7 @@
 
   user { 'foreman':
     ensure  => 'present',
-    shell   => '/sbin/nologin',
+    shell   => '/usr/sbin/nologin',
     comment => 'Foreman',
     home    => '/usr/share/foreman',
     gid     => 'foreman',
@@ -131,6 +131,7 @@
       require     => [ Service['foreman'] , Class[$foreman_backend_class] ],
       subscribe   => Package['foreman'],
       refreshonly => true,
+      user        => 'foreman',
     }
   }
 

diff --git a/templates/foreman-passenger.conf.erb b/templates/foreman-passenger.conf.erb
@@ -25,7 +25,7 @@
   SSLCertificateKeyFile <%= scope.lookupvar('foreman::ssl_key') %>
   SSLCertificateChainFile /var/lib/puppet/ssl/certs/ca.pem
   SSLCACertificateFile /var/lib/puppet/ssl/certs/ca.pem
-  SSLVerifyClient optional
+#  SSLVerifyClient optional
   SSLOptions +StdEnvVars
   SSLVerifyDepth 3
 <% end %>