[Freeipa-devel] [PATCH 0023] Add detection for users from trusted/invalid realms

[Tomas Babej]

Hi,

This is server part of #3252.

When user from other realm than FreeIPA's tries to use Web UI
(login via forms-based auth or with valid trusted realm ticket),
the 401 Unauthorized error with X-Ipa-Rejection-Reason=denied
is returned.

Also, the support for usernames of the form user at SERVER.REALM
or user at server.realm was added.

https://fedorahosted.org/freeipa/ticket/3252

Tomas

-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-tbabej-0023-Add-detection-for-users-from-trusted-invalid-realms.patch
Type: text/x-patch
Size: 2764 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20121115/61727a2d/attachment.bin>