Simo Sorce d63326632b Prevent churn on ccaches ...

We slice down the received cookie so that just the content that matter
is preserved. Thi is ok because servers can't trust anything else anyway
and will accept a cookie with the ancillary data missing.

By removing variable parts like the expiry component added by
mod_session or the Expiration or Max-Age metadata we keep only the part
of the cookie that changes only when a new session is generated.

This way when storing the cookie we actually add a new entry in the
ccache only when the session actually changes, and this prevents churn
on FILE based ccaches.

Related https://pagure.io/freeipa/issue/6775

Signed-off-by: Simo Sorce <simo@redhat.com>
Reviewed-By: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>

2017-03-28 13:36:30 +02:00

..

install

install: re-introduce option groups

2017-03-13 10:12:40 +01:00

__init__.py

pylint_plugins: add forbidden import checker

2017-03-10 13:04:59 +01:00

aci.py

Remove unused variables in the code

2016-09-27 13:35:58 +02:00

backend.py

ldap2: change default time/size limit

2016-11-07 11:34:03 +01:00

base.py

Modernize use of range()

2015-09-01 11:42:01 +02:00

capabilities.py

Replace LooseVersion

2016-11-24 15:46:40 +01:00

cli.py

Revert "Add 'ipa localenv' subcommand"

2016-12-02 13:00:06 +01:00

config.py

pylint_plugins: add forbidden import checker

2017-03-10 13:04:59 +01:00

constants.py

vault: cache the transport certificate on client

2017-03-13 16:02:16 +01:00

crud.py

ipalib, ipaserver: fix incorrect API.register calls in docstrings

2016-05-25 16:06:26 +02:00

dns.py

dns: do not rely on custom param fields in record attributes

2016-06-20 16:39:12 +02:00

errors.py

csrgen: Add code to generate scripts that generate CSRs

2017-01-31 10:20:28 +01:00

frontend.py

fix: regression in API version comparison

2016-12-13 13:53:27 +01:00

krb_utils.py

Allow login to WebUI using Kerberos aliases/enterprise principals

2017-03-08 15:56:11 +01:00

Makefile.am

Build: Makefiles for Python packages

2016-11-09 13:08:32 +01:00

messages.py

Fix malformed or missing docstrings in ipalib/messages

2016-08-16 11:59:35 +02:00

misc.py

Add fix for ipa plugins command

2017-02-17 10:22:07 +01:00

output.py

allow 'value' output param in commands without primary key

2016-07-20 13:57:01 +02:00

parameters.py

Stable _is_null check

2017-02-10 16:16:44 +01:00

pkcs10.py

cert-request: accept CSRs with extraneous data

2016-11-11 15:42:26 +01:00

plugable.py

Raise errors.EnvironmentError if IPA_CONFDIR var is incorrectly used

2016-12-02 15:05:33 +01:00

request.py

remove trailing newlines form python modules

2016-10-12 10:38:52 +02:00

rpc.py

Prevent churn on ccaches

2017-03-28 13:36:30 +02:00

setup.cfg

Port all setup.py to setuptools

2016-10-20 18:43:37 +02:00

setup.py

Adjustments for setup requirements v2

2016-12-02 09:45:14 +01:00

text.py

Python3 pylint fixes

2016-11-25 16:18:22 +01:00

util.py

Don't use weak ciphers for client HTTPS connections

2017-03-09 10:27:55 +01:00

x509.py

ipalib.x509: Handle missing SAN gracefully

2017-02-07 13:58:48 +01:00