WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-04-24 18:41:38 +08:00
Code Issues Packages Projects Releases Wiki Activity

Fix login_kerberos on the IPA API

Browse Source 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
This commit is contained in:
Aurélien Bompard
2020-11-18 14:58:11 +01:00
parent 248b90ba20
commit 60ed2dabd5
1 changed files with 9 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
roles/ipa/server/files/ipa-rewrite.conf
View File

@@ -21,8 +21,12 @@ RewriteEngine on
# Rewrite for plugin index, make it like it's a static file
RewriteRule ^/ipa/ui/js/freeipa/plugins.js$ /ipa/wsgi/plugins.py [PT]
# The following disables the annoying kerberos popup for browsers on windows
RewriteCond %{HTTP_COOKIE} !ipa_session
RewriteCond %{HTTP_REFERER} ^(.+)/ipa/ui/$
RewriteRule ^/ipa/session/json$ - [R=401,L]
RedirectMatch 401 ^/ipa/session/login_kerberos
# The following lines break the python-freeipa library that Noggin and FASJSON
# use. Don't enable them until we have found another way to make windows
# browsers happy.
# Maybe something like: https://github.com/gssapi/mod_auth_gssapi#example-1
# # The following disables the annoying kerberos popup for browsers on windows
# RewriteCond %{HTTP_COOKIE} !ipa_session
# RewriteCond %{HTTP_REFERER} ^(.+)/ipa/ui/$
# RewriteRule ^/ipa/session/json$ - [R=401,L]
# RedirectMatch 401 ^/ipa/session/login_kerberos