IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

Revert "Store GSSAPI session key in /var/run/ipa"

Browse Source 
This reverts commit 2bab2d4963. It was
pointed out that apache has no access to /var/lib/ipa directory breaking
the session handling.

https://pagure.io/freeipa/issue/6880

Reviewed-By: Simo Sorce <ssorce@redhat.com>
This commit is contained in:
Martin Babinsky 2017-04-27 14:36:01 +02:00
parent 2bab2d4963
commit 50f6883662
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
install/conf/ipa.conf
View File

@ -1,5 +1,5 @@
#
# VERSION 26 - DO NOT REMOVE THIS LINE
# VERSION 25 - DO NOT REMOVE THIS LINE
#
# This file may be overwritten on upgrades.
#
@ -78,7 +78,7 @@ WSGIScriptReloading Off
SessionCookieName ipa_session path=/ipa;httponly;secure;
SessionHeader IPASESSION
SessionMaxAge 1800
GssapiSessionKey file:/var/run/ipa/session.key
GssapiSessionKey file:/etc/httpd/alias/ipasession.key
GssapiImpersonate On
GssapiDelegCcacheDir /var/run/ipa/ccaches
@ -127,7 +127,7 @@ Alias /ipa/session/cookie "/usr/share/ipa/gssapi.login"
SessionCookieName ipa_session path=/ipa;httponly;secure;
SessionHeader IPASESSION
SessionMaxAge 1800
GssapiSessionKey file:/var/run/ipa/session.key
GssapiSessionKey file:/etc/httpd/alias/ipasession.key
Header unset Set-Cookie
</Location>