mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2026-10-25 06:38:02 -05:00
Revert "Store GSSAPI session key in /var/run/ipa"
This reverts commit 2bab2d4963. It was
pointed out that apache has no access to /var/lib/ipa directory breaking
the session handling.
https://pagure.io/freeipa/issue/6880
Reviewed-By: Simo Sorce <ssorce@redhat.com>
This commit is contained in:
1 parent
2bab2d4963
commit
50f6883662
1 file changed
+3
-3
@@ -1,5 +1,5 @@
|
||||
#
|
||||
# VERSION 26 - DO NOT REMOVE THIS LINE
|
||||
# VERSION 25 - DO NOT REMOVE THIS LINE
|
||||
#
|
||||
# This file may be overwritten on upgrades.
|
||||
#
|
||||
@@ -78,7 +78,7 @@ WSGIScriptReloading Off
|
||||
SessionCookieName ipa_session path=/ipa;httponly;secure;
|
||||
SessionHeader IPASESSION
|
||||
SessionMaxAge 1800
|
||||
GssapiSessionKey file:/var/run/ipa/session.key
|
||||
GssapiSessionKey file:/etc/httpd/alias/ipasession.key
|
||||
|
||||
GssapiImpersonate On
|
||||
GssapiDelegCcacheDir /var/run/ipa/ccaches
|
||||
@@ -127,7 +127,7 @@ Alias /ipa/session/cookie "/usr/share/ipa/gssapi.login"
|
||||
SessionCookieName ipa_session path=/ipa;httponly;secure;
|
||||
SessionHeader IPASESSION
|
||||
SessionMaxAge 1800
|
||||
GssapiSessionKey file:/var/run/ipa/session.key
|
||||
GssapiSessionKey file:/etc/httpd/alias/ipasession.key
|
||||
|
||||
Header unset Set-Cookie
|
||||
</Location>
|
||||
|
||||
Reference in new issue
Block a user