URL: https://github.com/freeipa/freeipa/pull/723
Title: #723: Store GSSAPI session key in /var/run/httpd
MartinBasti commented:
"""
The issue will be fixed on the SELinux side
"""
See the full comment at
https://github.com/freeipa/freeipa/pull/723#issuecomment-298627474
--
Manage your
URL: https://github.com/freeipa/freeipa/pull/723
Title: #723: Store GSSAPI session key in /var/run/httpd
simo5 commented:
"""
The current patch moved the key in a place where apache cannot write, resulting
in an ephemeral key that is thrown away each time apache is restarted/reloaded.
"""
See
URL: https://github.com/freeipa/freeipa/pull/723
Title: #723: Store GSSAPI session key in /var/run/httpd
simo5 commented:
"""
As I noted in the ticket: "At most you may want to store it in
/var/lib/ipa/somewhere, but we do not want to break sessions (there are people
using APIs from
URL: https://github.com/freeipa/freeipa/pull/723
Title: #723: Store GSSAPI session key in /var/run/httpd
simo5 commented:
"""
This patch is wrong please revert
"""
See the full comment at
https://github.com/freeipa/freeipa/pull/723#issuecomment-297699615
--
Manage your subscription for the
URL: https://github.com/freeipa/freeipa/pull/723
Title: #723: Store GSSAPI session key in /var/run/httpd
martbab commented:
"""
master:
* 2bab2d4963daa99742875f3633a99966bc56f5a3 Store GSSAPI session key in
/var/run/ipa
ipa-4-5:
* b2aa3ed0bc9f5385ab6e8b1720d9f1d33136e5dc Store GSSAPI session
URL: https://github.com/freeipa/freeipa/pull/723
Title: #723: Store GSSAPI session key in /var/run/httpd
MartinBasti commented:
"""
This approach was agreed on devel meeting
"""
See the full comment at
https://github.com/freeipa/freeipa/pull/723#issuecomment-297651621
--
Manage your
URL: https://github.com/freeipa/freeipa/pull/723
Title: #723: Store GSSAPI session key in /var/run/httpd
tomaskrizek commented:
"""
Functional ACK. There was a concern in the ticket's discussion about reboots -
are we going to handle them?
"""
See the full comment at
URL: https://github.com/freeipa/freeipa/pull/723
Title: #723: Store GSSAPI session key in /var/run/httpd
MartinBasti commented:
"""
Sure
"""
See the full comment at
https://github.com/freeipa/freeipa/pull/723#issuecomment-295643034
--
Manage your subscription for the Freeipa-devel mailing
URL: https://github.com/freeipa/freeipa/pull/723
Title: #723: Store GSSAPI session key in /var/run/httpd
HonzaCholasta commented:
"""
Could we put the mod_auth_gssapi session key in `/var/run/ipa/session.key`?
`/var/run/ipa` is where we store IPA-specific stuff, including mod_auth_gssapi
