On 25.11.2015 16:36, Gabe Alford wrote:
Bump for push. May need a rebase.
Thank you, rebased.
Pushed to master: b6c893aae63b6b77871c775d062a5c7e1c470ad9
On Wed, Jul 22, 2015 at 7:49 AM, Simo Sorce <sso...@redhat.com
<mailto:sso...@redhat.com>> wrote:
----- Original Message -----
> From: "Christian Heimes" <chei...@redhat.com
<mailto:chei...@redhat.com>>
> To: "freeipa-devel" <freeipa-devel@redhat.com
<mailto:freeipa-devel@redhat.com>>
> Sent: Wednesday, July 22, 2015 9:32:59 AM
> Subject: [Freeipa-devel] [PATCH 0015] mod_auth_gssapi: Remove
ntlmssp support and restrict, mechanism to krb5
>
> By default mod_auth_gssapi allows all locally available
mechanisms. If
> the gssntlmssp package is installed, it also offers ntlmssp.
This has
> the annoying side effect that some browser will pop up a
> username/password request dialog if no Krb5 credentials are
available.
>
> The patch restricts the mechanism to krb5 and removes ntlmssp and
> iakerb support from Apache's ipa.conf.
>
> The new feature was added to mod_auth_gssapi 1.3.0.
>
> https://fedorahosted.org/freeipa/ticket/5114
LGTM
Simo.
--
Simo Sorce * Red Hat, Inc. * New York
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code