From 593839ee050637852580d40f62939d309c4efdbe Mon Sep 17 00:00:00 2001
From: Ralph Bean <rbean@redhat.com>
Date: Apr 30 2018 01:24:58 +0000
Subject: [PATCH 1/2] Fix HTTP service-name.


This.. doesn't look right.

---

diff --git a/waiverdb/auth.py b/waiverdb/auth.py
index 1c1d08d..1226e3e 100644
--- a/waiverdb/auth.py
+++ b/waiverdb/auth.py
@@ -16,7 +16,7 @@ def process_gssapi_request(token):
     else:
         hostname = gethostname()
 
-    service_name = gssapi.Name("HTTP@%s" % hostname,
+    service_name = gssapi.Name("HTTP/%s" % hostname,
                                gssapi.NameType.hostbased_service)
 
     try:

From 2e0abc68b463a951623f198957767ddac7bdffcd Mon Sep 17 00:00:00 2001
From: Ralph Bean <rbean@redhat.com>
Date: Apr 30 2018 01:25:22 +0000
Subject: [PATCH 2/2] Log hostname used for krb service.


---

diff --git a/waiverdb/auth.py b/waiverdb/auth.py
index 1226e3e..12f1eda 100644
--- a/waiverdb/auth.py
+++ b/waiverdb/auth.py
@@ -41,9 +41,9 @@ def process_gssapi_request(token):
         user = str(sc.initiator_name)
         return user, token
     except gssapi.exceptions.GSSError as e:
-        current_app.logger.error(
-            'Unable to authenticate: failed to %s: %s' %
-            (stage, e.gen_message()))
+        current_app.logger.exception(
+            'Unable to authenticate (%s): failed to %s: %s' %
+            (hostname, stage, e.gen_message()))
         raise Forbidden("Authentication failed")