Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Disable SSL auth for stg distgit

Browse source 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
This commit is contained in:
Patrick Uiterwijk 2016-11-28 11:57:59 +00:00
parent df82d3ead9
commit 714fc09d7a
1 changed files with 6 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

6
roles/distgit/templates/lookaside-upload.conf
View file

@ -50,15 +50,18 @@ SSLCryptoDevice builtin
Options +ExecCGI Options +ExecCGI
{% if env == "production" %}
SSLVerifyClient optional SSLVerifyClient optional
SSLVerifyDepth 1 SSLVerifyDepth 1
SSLOptions +StrictRequire +StdEnvVars +OptRenegotiate SSLOptions +StrictRequire +StdEnvVars +OptRenegotiate
{% endif %}
AuthType GSSAPI AuthType GSSAPI
GssapiSSLonly On GssapiSSLonly On
AuthName "GSSAPI Single Sign On Login" AuthName "GSSAPI Single Sign On Login"
GssapiCredStore keytab:/etc/httpd.keytab GssapiCredStore keytab:/etc/httpd.keytab
{% if env == "production" %}
SetEnvIfExpr "%{SSL_CLIENT_S_DN_O} == 'Fedora Project'" cert_s_o_valid SetEnvIfExpr "%{SSL_CLIENT_S_DN_O} == 'Fedora Project'" cert_s_o_valid
SetEnvIfExpr "%{SSL_CLIENT_S_DN_OU} == 'Fedora User Cert'" cert_s_ou_valid SetEnvIfExpr "%{SSL_CLIENT_S_DN_OU} == 'Fedora User Cert'" cert_s_ou_valid
SetEnvIfExpr "%{SSL_CLIENT_I_DN_O} == 'Fedora Project'" cert_i_o_valid SetEnvIfExpr "%{SSL_CLIENT_I_DN_O} == 'Fedora Project'" cert_i_o_valid
@ -73,6 +76,9 @@ SSLCryptoDevice builtin
</RequireAll> </RequireAll>
Require valid-user Require valid-user
</RequireAny> </RequireAny>
{% else %}
Require valid-user
{% endif %}
</Location> </Location>
</VirtualHost> </VirtualHost>