Revert "Store GSSAPI session key in /var/run/ipa"

This reverts commit 2bab2d4963. It was
pointed out that apache has no access to /var/lib/ipa directory breaking
the session handling.

https://pagure.io/freeipa/issue/6880

Reviewed-By: Simo Sorce <ssorce@redhat.com>
This commit is contained in:
Martin Babinsky committed 2017-04-27 15:39:54 +02:00
1 parent 2bab2d4963
commit 50f6883662
1 file changed
+3 -3
+3 -3
View File
@@ -1,5 +1,5 @@
#
# VERSION 26 - DO NOT REMOVE THIS LINE
# VERSION 25 - DO NOT REMOVE THIS LINE
#
# This file may be overwritten on upgrades.
#
@@ -78,7 +78,7 @@ WSGIScriptReloading Off
SessionCookieName ipa_session path=/ipa;httponly;secure;
SessionHeader IPASESSION
SessionMaxAge 1800
GssapiSessionKey file:/var/run/ipa/session.key
GssapiSessionKey file:/etc/httpd/alias/ipasession.key
GssapiImpersonate On
GssapiDelegCcacheDir /var/run/ipa/ccaches
@@ -127,7 +127,7 @@ Alias /ipa/session/cookie "/usr/share/ipa/gssapi.login"
SessionCookieName ipa_session path=/ipa;httponly;secure;
SessionHeader IPASESSION
SessionMaxAge 1800
GssapiSessionKey file:/var/run/ipa/session.key
GssapiSessionKey file:/etc/httpd/alias/ipasession.key
Header unset Set-Cookie
</Location>