[Freeipa-devel] [PATCH 0043] Use mod_auth_gssapi instead of mod_auth_kerb.

Jan Cholasta jcholast at redhat.com
Mon Mar 30 05:15:10 UTC 2015


Dne 28.3.2015 v 00:09 Petr Vobornik napsal(a):
> On 27.3.2015 15:26, David Kupka wrote:
>> On 03/27/2015 03:14 PM, Rob Crittenden wrote:
>>> David Kupka wrote:
>>>> https://fedorahosted.org/freeipa/ticket/4190
>>>>
>>>> To test this on F22 my patch 42 is needed.
>>>>
>>>>
>>>
>>> NACK.
>>>
>>> You need to bump the VERSION in ipa.conf for this file to be replaced on
>>> upgrades.
>>
>> Thanks for the catch, Rob. I've forget about this.
>>>
>>> This also provides an opportunity to drop the cgi-bin configuration.
>>> This is a legacy from IPA v1.0 where people had TONS, loads and heaps of
>>> problems getting Kerberos working so we provided a CGI to spit out the
>>> environment to help with troubleshooting.
>>
>> If we can safely remove it, we should do it. I did a quick test and it
>> looks like we everything works without it.

Put it in a separate patch please, it is not related to mod_auth_gssapi.

Is there anything else we can remove?

>>
>>>
>>> rob
>>>
>>
>> Updated patch attached.
>>
>
> ACK
>
> tested on F22 - both CLI and Web UI


-- 
Jan Cholasta




More information about the Freeipa-devel mailing list