URL: https://github.com/freeipa/freeipa/pull/704 Author: dkupka Title: #704: WebUI: cert login: Configure name of parameter used to pass username Action: opened
PR body: """ Directive LookupUserByCertificateParamName tells mod_lookup_identity module the name of GET parameter that is used to provide username in case certificate is mapped to multiple user accounts. Without this directive login with certificate that's mapped to multiple users doesn't work. https://pagure.io/freeipa/issue/6860 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/704/head:pr704 git checkout pr704
From 1b4e5347f2fae112276179a156063b8b1f42fc27 Mon Sep 17 00:00:00 2001 From: David Kupka <dku...@redhat.com> Date: Mon, 10 Apr 2017 13:11:13 +0200 Subject: [PATCH] WebUI: cert login: Configure name of parameter used to pass username Directive LookupUserByCertificateParamName tells mod_lookup_identity module the name of GET parameter that is used to provide username in case certificate is mapped to multiple user accounts. Without this directive login with certificate that's mapped to multiple users doesn't work. https://pagure.io/freeipa/issue/6860 --- install/conf/ipa.conf | 1 + 1 file changed, 1 insertion(+) diff --git a/install/conf/ipa.conf b/install/conf/ipa.conf index e1f1a58..75c122e 100644 --- a/install/conf/ipa.conf +++ b/install/conf/ipa.conf @@ -117,6 +117,7 @@ Alias /ipa/session/cookie "/usr/share/ipa/gssapi.login" NSSVerifyClient require NSSUserName SSL_CLIENT_CERT LookupUserByCertificate On + LookupUserByCertificateParamName "username" WSGIProcessGroup ipa WSGIApplicationGroup ipa GssapiImpersonate On
-- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
