[rpms/fedora-packager] epel10.2: krb5 configurations: add auto_fast_armor = true

[Alexander Bokovoy <abokovoy@redhat.com>]

            A new commit has been pushed.

            Repo   : rpms/fedora-packager
            Branch : epel10.2
            Commit : 6cccdb38075b6472792b388a6546b8bac489b829
            Author : Alexander Bokovoy <abokovoy@redhat.com>
            Date   : 2025-09-22T11:19:05+03:00
            Stats  : +2/-0 in 2 file(s)
            URL    : https://src.fedoraproject.org/rpms/fedora-packager/c/6cccdb38075b6472792b388a6546b8bac489b829?branch=epel10.2

            Log:
            krb5 configurations: add auto_fast_armor = true

MIT Kerberos build gained capability to obtain Anonymous PKINIT ticket
automatically and use it to build a FAST channel armor during initial
ticket acquisition. This allows automatic enablement of passwordless
pre-authentication methods provided by FreeIPA.

The option is ignored by the Kerberos builds which do not have such
support. Once Kerberos packages upgraded, users will be able to see
requests for their OTP tokens in bare kinit command:

  $ kinit user
  Enter OTP token value:

  instead of using

  $ kinit -c fast.ccache -n @FEDORAPROJECT.ORG
  $ kinit -T fast.ccache user
  Enter OTP token value:

Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>

---
diff --git a/fedoraproject_org b/fedoraproject_org
index 4f2dd10..5f8732a 100644
--- a/fedoraproject_org
+++ b/fedoraproject_org
@@ -2,6 +2,7 @@
  FEDORAPROJECT.ORG = {
         kdc = https://id.fedoraproject.org/KdcProxy
         pkinit_anchors = FILE:/etc/pki/ipa/fedoraproject_ipa_ca.crt
+        auto_fast_armor = true
  }
 [domain_realm]
  .fedoraproject.org = FEDORAPROJECT.ORG

diff --git a/stg_fedoraproject_org b/stg_fedoraproject_org
index 940422e..7ad7c0c 100644
--- a/stg_fedoraproject_org
+++ b/stg_fedoraproject_org
@@ -2,6 +2,7 @@
  STG.FEDORAPROJECT.ORG = {
         kdc = https://id.stg.fedoraproject.org/KdcProxy
         pkinit_anchors = FILE:/etc/pki/ipa/stg_fedoraproject_ipa_ca.crt
+        auto_fast_armor = true
  }
 [domain_realm]
  .stg.fedoraproject.org = STG.FEDORAPROJECT.ORG