Use the CaCert used by pam_cas, or fallback to the default /etc/pki/tls/certs/cacert.pem

11 years ago · d4347c54fc
parent a282ae3dad
commit d4347c54fc
1 changed files with 1 additions and 1 deletions
--- a/root/etc/e-smith/templates/etc/jappix/main.xml/20Cas
+++ b/root/etc/e-smith/templates/etc/jappix/main.xml/20Cas
@ -1,4 +1,4 @@
        <auth_cas>on</auth_cas>
        <cas_server>auth.{$DomainName}</cas_server>
        <cas_uri>/cas</cas_uri>
-        <cas_cacert>/etc/pki/tls/certs/cacert.pem</cas_cacert>
+        <cas_cacert>{$pam_cas{'CaCert'} || '/etc/pki/tls/certs/cacert.pem'}</cas_cacert>