Re: [Freeipa-users] Request for comments - Apache SNI via IPA with kerberos authentication

2012-06-20 Thread James Hogarth
I'll try and replicate the blog findings in the course of the next couple of days if it works I'll add it to the wiki ... Set up a test this morning using Centos 6: nss-3.13.1-7.el6_2.x86_64 mod_nss-1.0.8-14.el6_2.x86_64 The behaviour was... odd SNI itself must have been working as

Re: [Freeipa-users] Request for comments - Apache SNI via IPA with kerberos authentication

2012-06-20 Thread Rob Crittenden
James Hogarth wrote: I'll try and replicate the blog findings in the course of the next couple of days if it works I'll add it to the wiki ... Set up a test this morning using Centos 6: nss-3.13.1-7.el6_2.x86_64 mod_nss-1.0.8-14.el6_2.x86_64 The behaviour was... odd SNI itself must

Re: [Freeipa-users] Request for comments - Apache SNI via IPA with kerberos authentication

2012-06-20 Thread James Hogarth
Only one nss database may be opened at a time. mod_nss should probably error out if multiple are defined to prevent confusion. I'd think a nickname should be unique to a given VirtualServer. If not then it's a bug. That makes sense - and yeah it should probably error out rather than just

[Freeipa-users] Request for comments - Apache SNI via IPA with kerberos authentication

2012-06-19 Thread James Hogarth
Hi all, As mentioned on IRC today I've finished my write up of using Apache with SNI and kerberos authentication with an IPA backend I'd be interested in any feedback: http://freeipa.org/page/Apache_SNI_With_Kerberos Kind regards, James ___

Re: [Freeipa-users] Request for comments - Apache SNI via IPA with kerberos authentication

2012-06-19 Thread Simo Sorce
On Tue, 2012-06-19 at 13:04 +0100, James Hogarth wrote: Hi all, As mentioned on IRC today I've finished my write up of using Apache with SNI and kerberos authentication with an IPA backend I'd be interested in any feedback: http://freeipa.org/page/Apache_SNI_With_Kerberos Very nice

Re: [Freeipa-users] Request for comments - Apache SNI via IPA with kerberos authentication

2012-06-19 Thread Natxo Asenjo
On Tue, Jun 19, 2012 at 2:04 PM, James Hogarth james.hoga...@gmail.comwrote: Hi all, As mentioned on IRC today I've finished my write up of using Apache with SNI and kerberos authentication with an IPA backend I'd be interested in any feedback:

Re: [Freeipa-users] Request for comments - Apache SNI via IPA with kerberos authentication

2012-06-19 Thread Rob Crittenden
Simo Sorce wrote: On Tue, 2012-06-19 at 13:04 +0100, James Hogarth wrote: Hi all, As mentioned on IRC today I've finished my write up of using Apache with SNI and kerberos authentication with an IPA backend I'd be interested in any feedback: