def __CustodiaClient(self, server):
# Before we attempt to fetch keys from this host, make sure our public
# keys have been replicated there.
self.__wait_keys(server)
return CustodiaClient('host@%s' % self.fqdn, self.server_keys,
paths.KRB5_KEYTAB, server, realm=self.realm)
def _get_custodia_client(self, server):
# Before we attempt to fetch keys from this host, make sure our public
# keys have been replicated there.
self._wait_keys(server)
return CustodiaClient(client_service='host@{}'.format(self.fqdn),
keyfile=self.server_keys,
keytab=paths.KRB5_KEYTAB,
server=server,
realm=self.realm)
def _get_custodia_client(self):
if self.custodia_peer is None:
raise ValueError("Can't replicate secrets without Custodia peer")
# Before we attempt to fetch keys from this host, make sure our public
# keys have been replicated there.
self._wait_keys()
return CustodiaClient(
client_service='host@{}'.format(self.fqdn),
keyfile=self.server_keys, keytab=paths.KRB5_KEYTAB,
server=self.custodia_peer, realm=self.realm
)
