Natxo Asenjo wrote:
> hi,
>
> I just noticed some stuff was not functioning properly and it's because
> the crl url is being redirected to https (centos 6.7).
>
>
> $ curl http://kdc01.unix.domain.tld/ipa/crl/
>
>
> 301 Moved Permanently
>
> Moved Permanently
> The document has moved
hi,
On Tue, Nov 10, 2015 at 5:02 PM, Rob Crittenden wrote:
> Natxo Asenjo wrote:> Any ideas on how to fix this?
>
> You should have a sections like these in /etc/httpd/conf.d/ipa.conf:
>
>
> SetHandler None
>
> ...
> # For CRL publishing
> Alias /ipa/crl
but going back to ipa-rewrite.conf, these 2 seem contradictory:
# Redirect to the fully-qualified hostname. Not redirecting to secure
# port so configuration files can be retrieved without requiring SSL.
RewriteCond %{HTTP_HOST}!^kdc01.unix.iriszorg.nl$ [NC]
RewriteRule ^/ipa/(.*)