Increase the request header limit to accommodate a 64KiB PAC.

It's hard to test this outside of trust but you can do a reverse test to be sure this is doing anything by setting the limit to 10. You should get a 400 error back.

And I guess check for regressions. All tests are passing for me.

rob
>From 7f822c7ae3e8e11c5dadd9b0e9d7780b975235d6 Mon Sep 17 00:00:00 2001
From: Rob Crittenden <rcrit...@redhat.com>
Date: Thu, 14 Jun 2012 11:15:30 -0400
Subject: [PATCH] Increase LimitRequestFieldSize in Apache config to support a
 64KiB PAC

https://fedorahosted.org/freeipa/ticket/2767
---
 install/conf/ipa.conf |    5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/install/conf/ipa.conf b/install/conf/ipa.conf
index b01a0c2b4f91330f9a904899f0367485244d08c5..1b31a52ac505cb54ccf8de2171f3fccd201bba88 100644
--- a/install/conf/ipa.conf
+++ b/install/conf/ipa.conf
@@ -1,5 +1,5 @@
 #
-# VERSION 6 - DO NOT REMOVE THIS LINE
+# VERSION 7 - DO NOT REMOVE THIS LINE
 #
 # This file may be overwritten on upgrades.
 #
@@ -12,6 +12,9 @@ ProxyRequests Off
 DirectoryIndex index.html
 
 
+# Substantially increase the request field size to support MS-PAC
+# requests, ticket #2767. This should easily support a 64KiB PAC.
+LimitRequestFieldSize 100000
 
 # ipa-rewrite.conf is loaded separately
 
-- 
1.7.10.1

_______________________________________________
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel

Reply via email to