Simo Sorce 83619e804b Fix rare race condition with missing ccache file ...

In some circumstances the ccache file may disappear while
mod_auth_gssapi still has a valid cookie and the client is performing a
json server call.

This may lead to credentials getting sourced from the keytab.
Make sure we enforce what GSS NAME we want to resolve so HTTP creds are
never mistakenly sourced.

Ticket: #6972

Signed-off-by: Simo Sorce <simo@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>

2017-05-24 17:55:53 +02:00

..

advise

scripts, tests: explicitly set confdir in the rest of server code

2017-02-22 08:07:48 +00:00

dnssec

Fix PKCS11 helper

2017-04-12 09:54:10 +02:00

install

ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt

2017-05-22 13:28:40 +02:00

plugins

Remove pkinit-anonymous command

2017-05-23 18:05:22 +02:00

secrets

ipa-kra-install: fix check_host_keys

2017-05-09 14:28:13 +02:00

__init__.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

dcerpc.py

ipaserver/dcerpc: unify error processing

2017-04-11 14:16:39 +02:00

dns_data_management.py

Fix compatibility with python-dns 1.15.0

2016-10-11 15:45:41 +02:00

Makefile.am

Build: Makefiles for Python packages

2016-11-09 13:08:32 +01:00

p11helper.py

Fix PKCS11 helper

2017-04-12 09:54:10 +02:00

rpcserver.py

Fix rare race condition with missing ccache file

2017-05-24 17:55:53 +02:00

servroles.py

Introduce "NTP server" role

2016-06-15 13:51:48 +02:00

setup.cfg

Port all setup.py to setuptools

2016-10-20 18:43:37 +02:00

setup.py

Turn on NSSOCSP check in mod_nss conf

2017-05-10 09:08:34 +02:00

topology.py

Fix topologysuffix-verify failing connections

2016-06-24 13:32:02 +02:00