freeipa/ipaclient
Christian Heimes 917d81b832 Allow HTTPd user to access SSSD IFP
For smart card and certificate authentication, Apache's
mod_lookup_identity module must be able to acess SSSD IFP. The module
accesses IFP as Apache user, not as ipaapi user.

Apache is not allowed to use IFP by default. The update code uses the
service's ok-to-auth-as-delegate flag to detect smart card / cert auth.

See: https://pagure.io/freeipa/issue/7751
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
2018-12-11 13:46:52 +01:00
..
csrgen csrgen: Change to pure openssl config format (no script) 2017-04-03 07:46:30 +00:00
install Allow HTTPd user to access SSSD IFP 2018-12-11 13:46:52 +01:00
plugins pylint 2.2: Fix unnecessary pass statement 2018-11-26 16:54:43 +01:00
remote_plugins Py3: Remove subclassing from object 2018-09-27 11:49:04 +02:00
__init__.py Split ipa-client/ into ipaclient/ (Python library) and client/ (C, scripts) 2016-01-27 12:09:02 +01:00
__main__.py Use entry_points for ipa CLI 2017-04-11 13:29:50 +02:00
csrgen_ffi.py Cleanup shebang and executable bit 2018-07-05 19:46:42 +02:00
csrgen.py Py3: Remove subclassing from object 2018-09-27 11:49:04 +02:00
frontend.py frontent: Add summary class property to CommandOverride 2016-08-17 14:16:04 +02:00
Makefile.am Build: Makefiles for Python packages 2016-11-09 13:08:32 +01:00
setup.cfg Port all setup.py to setuptools 2016-10-20 18:43:37 +02:00
setup.py Cleanup shebang and executable bit 2018-07-05 19:46:42 +02:00