David Kupka 70889d4d5e rpcserver: x509_login: Handle unsuccessful certificate login gracefully ...

When mod_lookup_identity is unable to match user by certificate (and username)
it unsets http request's user. mod_auth_gssapi is then unable to get Kerberos
ticket and doesn't set KRB5CCNAME environment variable.
x509_login.__call__ now returns 401 in such case to indicate that request was
not authenticated.

https://pagure.io/freeipa/issue/6225

Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>

2017-03-15 10:34:44 +01:00

..

advise

scripts, tests: explicitly set confdir in the rest of server code

2017-02-22 08:07:48 +00:00

dnssec

scripts, tests: explicitly set confdir in the rest of server code

2017-02-22 08:07:48 +00:00

install

httpinstance: disable system trust module in /etc/httpd/alias

2017-03-14 17:12:19 +01:00

plugins

idviews: correctly handle modification of non-existent view

2017-03-15 09:48:12 +01:00

secrets

Fix replica with --setup-ca issues

2017-03-01 13:39:44 +00:00

__init__.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

dcerpc.py

ipaserver/dcerpc.py: use arcfour_encrypt from samba

2017-03-13 17:27:15 +01:00

dns_data_management.py

Fix compatibility with python-dns 1.15.0

2016-10-11 15:45:41 +02:00

Makefile.am

Build: Makefiles for Python packages

2016-11-09 13:08:32 +01:00

p11helper.py

ipapython: move dnssec, p11helper and secrets to ipaserver

2016-11-29 14:50:51 +01:00

rpcserver.py

rpcserver: x509_login: Handle unsuccessful certificate login gracefully

2017-03-15 10:34:44 +01:00

servroles.py

Introduce "NTP server" role

2016-06-15 13:51:48 +02:00

setup.cfg

Port all setup.py to setuptools

2016-10-20 18:43:37 +02:00

setup.py

Finish port to PyCA cryptography

2017-03-01 12:51:50 +01:00

topology.py

Fix topologysuffix-verify failing connections

2016-06-24 13:32:02 +02:00