freeipa/ipa-server/xmlrpc-server/ipa.conf

# LoadModule auth_kerb_module modules/mod_auth_kerb.so

Alias /ipa "/usr/share/ipa/ipaserver/XMLRPC"

<Directory "/usr/share/ipa/ipaserver">
  AuthType Kerberos
  AuthName "Kerberos Login"
  KrbMethodNegotiate on
  KrbMethodK5Passwd off
  KrbServiceName HTTP
  KrbAuthRealms $REALM
  Krb5KeyTab /etc/httpd/conf/ipa.keytab
  KrbSaveCredentials on
  Require valid-user
  ErrorDocument 401 /errors/unauthorized.html

  SetHandler mod_python
  PythonHandler ipaxmlrpc
  
  PythonDebug Off

  # this is pointless to use since it would just reload ipaxmlrpc.py
  PythonAutoReload Off
</Directory>
Second (final) part of xmlrpc patch. 0000-12-31 18:09:24 -05:50			`# LoadModule auth_kerb_module modules/mod_auth_kerb.so`

Final reorginzation to reflect packaging. 0000-12-31 18:09:24 -05:50			`Alias /ipa "/usr/share/ipa/ipaserver/XMLRPC"`
Second (final) part of xmlrpc patch. 0000-12-31 18:09:24 -05:50
Fixed broken patches and server spec. 0000-12-31 18:09:24 -05:50			`<Directory "/usr/share/ipa/ipaserver">`
- Abstracted client class to work directly or over RPC - Add mod_auth_kerb and cyrus-sasl-gssapi to Requires - Remove references to admin server in ipa-server-setupssl - Generate a client certificate for the XML-RPC server to connect to LDAP with - Create a keytab for Apache - Create an ldif with a test user - Provide a certmap.conf for doing SSL client authentication - Update tools to use kerberos - Add User class 2007-08-06 09:05:53 -05:00			`AuthType Kerberos`
			`AuthName "Kerberos Login"`
			`KrbMethodNegotiate on`
			`KrbMethodK5Passwd off`
			`KrbServiceName HTTP`
Generate /etc/httpd/conf.d/ipa.conf from a template so the realm can be set during installation 2007-08-06 09:51:23 -05:00			`KrbAuthRealms $REALM`
- Abstracted client class to work directly or over RPC - Add mod_auth_kerb and cyrus-sasl-gssapi to Requires - Remove references to admin server in ipa-server-setupssl - Generate a client certificate for the XML-RPC server to connect to LDAP with - Create a keytab for Apache - Create an ldif with a test user - Provide a certmap.conf for doing SSL client authentication - Update tools to use kerberos - Add User class 2007-08-06 09:05:53 -05:00			`Krb5KeyTab /etc/httpd/conf/ipa.keytab`
			`KrbSaveCredentials on`
			`Require valid-user`
Second (final) part of xmlrpc patch. 0000-12-31 18:09:24 -05:50			`ErrorDocument 401 /errors/unauthorized.html`

			`SetHandler mod_python`
			`PythonHandler ipaxmlrpc`

			`PythonDebug Off`

			`# this is pointless to use since it would just reload ipaxmlrpc.py`
			`PythonAutoReload Off`
			`</Directory>`