Increase the request header limit to accommodate a 64KiB PAC.
It's hard to test this outside of trust but you can do a reverse test to be sure this is doing anything by setting the limit to 10. You should get a 400 error back.
And I guess check for regressions. All tests are passing for me. rob
>From 7f822c7ae3e8e11c5dadd9b0e9d7780b975235d6 Mon Sep 17 00:00:00 2001 From: Rob Crittenden <[email protected]> Date: Thu, 14 Jun 2012 11:15:30 -0400 Subject: [PATCH] Increase LimitRequestFieldSize in Apache config to support a 64KiB PAC https://fedorahosted.org/freeipa/ticket/2767 --- install/conf/ipa.conf | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/install/conf/ipa.conf b/install/conf/ipa.conf index b01a0c2b4f91330f9a904899f0367485244d08c5..1b31a52ac505cb54ccf8de2171f3fccd201bba88 100644 --- a/install/conf/ipa.conf +++ b/install/conf/ipa.conf @@ -1,5 +1,5 @@ # -# VERSION 6 - DO NOT REMOVE THIS LINE +# VERSION 7 - DO NOT REMOVE THIS LINE # # This file may be overwritten on upgrades. # @@ -12,6 +12,9 @@ ProxyRequests Off DirectoryIndex index.html +# Substantially increase the request field size to support MS-PAC +# requests, ticket #2767. This should easily support a 64KiB PAC. +LimitRequestFieldSize 100000 # ipa-rewrite.conf is loaded separately -- 1.7.10.1
_______________________________________________ Freeipa-devel mailing list [email protected] https://www.redhat.com/mailman/listinfo/freeipa-devel
