Attachment 663207 Details for Bug 758813 – Patch taken from the pull request.

[patch] Patch taken from the pull request.

0001-758813-Disable-basic-and-trusted-auth-in-the-candlep.patch (text/plain), 2.11 KB, created by Bryan Kearney on 2012-12-13 21:39:02 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Bryan Kearney

Created: 2012-12-13 21:39:02 UTC

Size: 2.11 KB

patch

obsolete

>From ba2d5131de181dcffc833aeb80ea3fde55754a55 Mon Sep 17 00:00:00 2001
>From: Bryan Kearney <bkearney@redhat.com>
>Date: Thu, 13 Dec 2012 16:30:19 -0500
>Subject: [PATCH] 758813: Disable basic and trusted auth in the candlepin
> engine since it is not required.
>
>This manifested as an an error seen by curl which when using basic auth there was an error
>contacting the user service. Basic auth should never be used. With these settings, the output
>is
>
>[root@samdev ~]# curl -k -u admin:admin https://localhost:8443/candlepin/owners
>{"displayMessage":"Invalid credentials."}
>
>Note, this will make development harder since people may use curl to access candlepin.
>Developers can set these to true and then restart candlepin
>---
> .../modules/candlepin/templates/etc/candlepin/candlepin.conf.erb      | 4 +++-
> 1 file changed, 3 insertions(+), 1 deletion(-)
>
>diff --git a/katello-configure/modules/candlepin/templates/etc/candlepin/candlepin.conf.erb b/katello-configure/modules/candlepin/templates/etc/candlepin/candlepin.conf.erb
>index 3a85e58..a604f80 100644
>--- a/katello-configure/modules/candlepin/templates/etc/candlepin/candlepin.conf.erb
>+++ b/katello-configure/modules/candlepin/templates/etc/candlepin/candlepin.conf.erb
>@@ -12,9 +12,11 @@ jpa.config.hibernate.connection.username=<%= scope.lookupvar("candlepin::params:
> jpa.config.hibernate.connection.password=<%= scope.function_katello_passencrypt([scope.lookupvar("candlepin::params::db_pass")]) %>
> candlepin.consumer_system_name_pattern = .+
> candlepin.environment_content_filtering=<%= scope.lookupvar("candlepin::params::env_filtering_enabled") %>
>+candlepin.auth.basic.enable = false
>+candlepin.auth.trusted.enable = false
> <% if scope.lookupvar("candlepin::params::katello_oauth_key") != "" -%>
> module.config.katello=org.candlepin.katello.KatelloModule
>-candlepin.auth.oauth.enabled = true
>+candlepin.auth.oauth.enable = true
> candlepin.auth.oauth.consumer.<%= scope.lookupvar("candlepin::params::katello_oauth_key") %>.secret = <%= scope.lookupvar("candlepin::params::katello_oauth_secret") %>
> candlepin.crl.file = <%= scope.lookupvar("candlepin::params::crl_file") %>
> <%- end -%>
>-- 
>1.7.11.7
>

Actions: View | Diff

Attachments on bug 758813: 663207