From dbfb011da7d79b1eb4ace7d8cb45aa8a86f3eaba Mon Sep 17 00:00:00 2001
From: Christian Heimes <cheimes@redhat.com>
Date: Dec 06 2019 09:23:15 +0000
Subject: Fix lite-server to work with GSS_NAME


The lite-server does no longer work correctly since rpcserver is also
using GSS_NAME. Set up GSS_NAME from ccache.

Reviewed-By: Rob Crittenden <rcritten@redhat.com>

---

diff --git a/contrib/lite-server.py b/contrib/lite-server.py
index e2cb3d2..15471c4 100755
--- a/contrib/lite-server.py
+++ b/contrib/lite-server.py
@@ -1,4 +1,4 @@
-#!/usr/bin/env python
+#!/usr/bin/env python3
 #
 # Copyright (C) 2017 FreeIPA Contributors see COPYING for license
 #
@@ -35,8 +35,7 @@ You may also have to enable a development COPR.
 
     $ sudo dnf install -y dnf-plugins-core
     $ sudo dnf builddep --spec freeipa.spec.in
-    $ sudo dnf install -y python-werkzeug python2-watchdog \
-        python3-werkzeug python3-watchdog
+    $ sudo dnf install -y python3-werkzeug python3-watchdog
     $ ./autogen.sh
 
 For more information see
@@ -61,6 +60,7 @@ from ipalib.errors import NetworkError
 from ipalib.krb_utils import krb5_parse_ccache
 from ipalib.krb_utils import krb5_unparse_ccache
 
+import gssapi
 # pylint: disable=import-error
 from werkzeug.contrib.profiler import ProfilerMiddleware
 from werkzeug.exceptions import NotFound
@@ -107,14 +107,19 @@ def get_ccname():
 
 
 class KRBCheater:
-    """Add KRB5CCNAME to WSGI environ
+    """Add KRB5CCNAME and GSS_NAME to WSGI environ
     """
     def __init__(self, app, ccname):
         self.app = app
         self.ccname = ccname
+        self.creds = gssapi.Credentials(
+            usage='initiate',
+            store={'ccache': ccname}
+        )
 
     def __call__(self, environ, start_response):
         environ['KRB5CCNAME'] = self.ccname
+        environ['GSS_NAME'] = self.creds.name
         return self.app(environ, start_response)