Attachment 314327 Details for Bug 459061 – Make Proxy directive wildcard match more specific

[patch] Make Proxy directive wildcard match more specific

freeipa-73-proxy.patch (text/plain), 1.28 KB, created by Rob Crittenden on 2008-08-14 15:23:49 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Rob Crittenden

Created: 2008-08-14 15:23:49 UTC

Size: 1.28 KB

patch

obsolete

>From edec5f97207e34dd0e821dae7cd58b098cce1a80 Mon Sep 17 00:00:00 2001
>From: Rob Crittenden <rcrit@ipa.greyoak.com>
>Date: Thu, 14 Aug 2008 11:46:10 -0400
>Subject: [PATCH] Make Proxy directive wildcard match more specific so we can play nicer
> with other apps.
>
>459061
>---
> ipa-server/xmlrpc-server/ipa.conf |    6 +++---
> 1 files changed, 3 insertions(+), 3 deletions(-)
>
>diff --git a/ipa-server/xmlrpc-server/ipa.conf b/ipa-server/xmlrpc-server/ipa.conf
>index 1eca977..85b4543 100644
>--- a/ipa-server/xmlrpc-server/ipa.conf
>+++ b/ipa-server/xmlrpc-server/ipa.conf
>@@ -1,5 +1,5 @@
> #
>-# VERSION 1 - DO NOT REMOVE THIS LINE
>+# VERSION 2 - DO NOT REMOVE THIS LINE
> #
> # LoadModule auth_kerb_module modules/mod_auth_kerb.so
> 
>@@ -10,7 +10,7 @@ ProxyRequests Off
> # This is required so the auto-configuration works with Firefox 2+
> AddType application/java-archive        jar
> 
>-<Proxy *>
>+<ProxyMatch ^.*/ipa/ui.*$$>
>   AuthType Kerberos
>   AuthName "Kerberos Login"
>   KrbMethodNegotiate on
>@@ -28,7 +28,7 @@ AddType application/java-archive        jar
>   RequestHeader set X-Forwarded-Keytab %{KRB5CCNAME}e
> 
>   # RequestHeader unset Authorization
>-</Proxy>
>+</ProxyMatch>
> 
> # The URI's with a trailing ! are those that aren't handled by the proxy
> ProxyPass /ipa/ui http://localhost:8080/ipa/ui
>-- 
>1.5.4.1
>

Actions: View | Diff

Attachments on bug 459061: 314327