freeipa/ipaserver
Rob Crittenden ffba69648a Force a logout in KerberosSession if a login is needed
Remove the client side cookie if a user possesses an IPA session
cookie and the associated credentials can't be found on the
server.

This handles the case where the ccaches are removed for some reason
(maybe cleanup, maybe a container was restarted) and allows for
a successful SSO if the user's Kerberos ticket is still valid.

Without this change the user is always dropped into a the
username/password dialog. The only workaround is to remove
the cookie on the client side.

Fixes: https://pagure.io/freeipa/issue/9624

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Florence Blanc-Renaud <flo@redhat.com>
2024-08-05 14:50:10 +02:00
..
advise The -d option of the ipa-advise command was able to used. 2024-07-11 10:30:59 +02:00
custodia custodia: do not use deprecated jwcrypto wrappers 2024-05-23 15:12:27 -04:00
dnssec pylint: Fix useless-suppression 2022-03-11 13:37:08 -05:00
install Replica CA installation: ignore time skew during initial replication 2024-08-01 09:51:11 +02:00
plugins PKINIT certificate: fix renewal on hidden replica 2024-06-26 07:36:53 +02:00
secrets pylint: disable missing-timeout message 2023-01-10 08:30:58 +01:00
__init__.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
dcerpc_common.py Py3: Replace six.text_type with str 2018-09-27 16:11:18 +02:00
dcerpc.py ipaserver: fix incorrect double negative in exception message 2024-05-06 17:10:18 -04:00
dns_data_management.py Wipe the ipa-ca DNS record when updating system records 2023-02-09 14:24:14 -05:00
Makefile.am Build: Makefiles for Python packages 2016-11-09 13:08:32 +01:00
masters.py Configure affinity during server installation 2023-09-01 13:13:02 -04:00
p11helper.py Grammar: whitespace is a word 2020-06-23 10:16:29 +02:00
rpcserver.py Force a logout in KerberosSession if a login is needed 2024-08-05 14:50:10 +02:00
servroles.py Use api.env.container_sysaccounts 2020-04-28 11:28:29 +02:00
setup.cfg Port all setup.py to setuptools 2016-10-20 18:43:37 +02:00
setup.py Also drop Custodia client and forwarder 2021-06-16 10:28:17 -04:00
topology.py pylint: Fix consider-using-dict-items 2022-03-11 13:37:08 -05:00
wsgi.py Improve wsgi app loading 2021-04-07 11:43:23 +03:00