Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Fix login_kerberos on the IPA API

Browse source 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
This commit is contained in:
Aurélien Bompard 2020-11-18 14:58:11 +01:00
parent 248b90ba20
commit 60ed2dabd5
No known key found for this signature in database
GPG key ID: 31584CFEB9BF64AD
1 changed files with 9 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

14
roles/ipa/server/files/ipa-rewrite.conf
View file

@ -21,8 +21,12 @@ RewriteEngine on
# Rewrite for plugin index, make it like it's a static file
RewriteRule ^/ipa/ui/js/freeipa/plugins.js$ /ipa/wsgi/plugins.py [PT]
# The following disables the annoying kerberos popup for browsers on windows
RewriteCond %{HTTP_COOKIE} !ipa_session
RewriteCond %{HTTP_REFERER} ^(.+)/ipa/ui/$
RewriteRule ^/ipa/session/json$ - [R=401,L]
RedirectMatch 401 ^/ipa/session/login_kerberos
# The following lines break the python-freeipa library that Noggin and FASJSON
# use. Don't enable them until we have found another way to make windows
# browsers happy.
# Maybe something like: https://github.com/gssapi/mod_auth_gssapi#example-1
# # The following disables the annoying kerberos popup for browsers on windows
# RewriteCond %{HTTP_COOKIE} !ipa_session
# RewriteCond %{HTTP_REFERER} ^(.+)/ipa/ui/$
# RewriteRule ^/ipa/session/json$ - [R=401,L]
# RedirectMatch 401 ^/ipa/session/login_kerberos