public/freeipa
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
918 Commits 9 Branches 0 Tags
cdba310f02a80d63452feb098b983dbbfbbc890a
Commit Graph
17 Commits
Author SHA1 Message Date
Rob Crittenden 8e7561cff6 Refine our web space some more so that everything we reference is in /ipa 
UI: /ipa/ui
XML-RPC: /ipa/xml
errors: /ipa/errors
config: /ipa/config

I had to hardcode that URI into the CSS pages but TurboGears handles the
rest of the translations with tg.url().

Added a version to ipa.conf and ipa-rewrite.conf so we can update them
in the future if needed with ipa-upgradeconfig

440443
 2008-05-07 09:41:32 -04:00
Rob Crittenden 4c288e653a Re-root the IPA web UI to /ipa and the XML-RPC interface to /ipaxml. 
438021
 2008-03-24 15:54:55 -04:00
Rob Crittenden 49148dc34a Redirect users when they don't use the FQDN on both SSL and non-SSL ports 
We update the mod_nss configuration (nss.conf) during installation to include
ipa-rewrite.conf to handle the SSL side.

433054
 2008-02-21 16:25:09 -05:00
Rob Crittenden 6390db3502 Add automatic browser configuration for kerberos SSO using javascript. 
This uses the UniversalPreferencesWrite function to set the browser
preferences to allow negotiation and ticket forwarding in the IPA domain.
A self-signed certificate is generated to sign the javascript.
 2007-12-12 09:36:32 -05:00
Rob Crittenden 547e6e920e Redirect to the FQDN otherwise kerberos auth may fail 2007-11-12 14:47:48 -05:00
Rob Crittenden e40c583b12 Create configuration for MIT Windows kerberos client and install into 
http://hostname/config so users can point their MIT client at the IPA
server and automatically fetch the configuration.
 2007-10-29 12:00:48 -04:00
Rob Crittenden ba0adcffb1 Require SSL for the XML-RPC interface 2007-10-19 10:14:30 -04:00
rcritten@redhat.com 0258d01792 Use a different directory for test programs 2007-09-25 09:50:30 -04:00
rcritten@redhat.com 0b65e95b57 Make doing basic testing of Kerberos ticket forwarding and system setup 
easier.
 2007-09-25 08:37:45 -04:00
rcritten@redhat.com e606ad5606 Show (hopefully) useful information if the Kerberos connection fails. 2007-09-24 15:20:34 -04:00
rcritten@redhat.com 2fec56d679 Enable LDAP debugging using the mod_python Apache configuration directive 
PythonOption IPADebug On/Off
 2007-09-21 14:39:52 -04:00
rcritten@redhat.com b85668579e Use ticket forwarding with TurboGears. mod_proxy forwards the principal 
name and location of the keytab. In order for this keytab to be usable
 TurboGears and Apache will need to run as the same user. We will also need
 to listen only on localhost in TG.
 2007-09-14 17:19:02 -04:00
rcritten 182fbe3094 Enable mod_proxy to sit in front of TurboGears and pass along the 
kerberos principal name
Add an identity an visit class to TurboGears that can handle the user
 without requiring a database
Update the UI to show the user correctly.
Note that this is currently disabled. It is hardcoded to always return the
 principal test@FREEIPA.ORG in proxyprovider.py
It doesn't handle an unauthorized request because that can never happen.
 2007-09-10 16:33:01 -04:00
rcritten@redhat.com b9b06a2a60 Generate /etc/httpd/conf.d/ipa.conf from a template so the realm can 
be set during installation
 2007-08-06 10:51:23 -04:00
rcritten@redhat.com 993f76fe60 - Abstracted client class to work directly or over RPC 
- Add mod_auth_kerb and cyrus-sasl-gssapi to Requires
- Remove references to admin server in ipa-server-setupssl
- Generate a client certificate for the XML-RPC server to connect to LDAP with
- Create a keytab for Apache
- Create an ldif with a test user
- Provide a certmap.conf for doing SSL client authentication
- Update tools to use kerberos
- Add User class
 2007-08-06 10:05:53 -04:00
Karl MacMillan 8cf45633fe Fixed broken patches and server spec. -
Karl MacMillan 7d95cd612c Final reorginzation to reflect packaging. -