From d4347c54fc6da914c230c3df235376752d905ce6 Mon Sep 17 00:00:00 2001
From: Daniel Berteaud <daniel@firewall-services.com>
Date: Thu, 18 Jul 2013 12:10:47 +0200
Subject: [PATCH] Use the CaCert used by pam_cas, or fallback to the default
 /etc/pki/tls/certs/cacert.pem

---
 root/etc/e-smith/templates/etc/jappix/main.xml/20Cas | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/root/etc/e-smith/templates/etc/jappix/main.xml/20Cas b/root/etc/e-smith/templates/etc/jappix/main.xml/20Cas
index f8b45df..8bc07ca 100644
--- a/root/etc/e-smith/templates/etc/jappix/main.xml/20Cas
+++ b/root/etc/e-smith/templates/etc/jappix/main.xml/20Cas
@@ -1,4 +1,4 @@
         <auth_cas>on</auth_cas>
         <cas_server>auth.{$DomainName}</cas_server>
         <cas_uri>/cas</cas_uri>
-        <cas_cacert>/etc/pki/tls/certs/cacert.pem</cas_cacert>
+        <cas_cacert>{$pam_cas{'CaCert'} || '/etc/pki/tls/certs/cacert.pem'}</cas_cacert>