diff options
| author | Martin Kosek <mkosek@redhat.com> | 2011-09-27 08:51:31 +0200 |
|---|---|---|
| committer | Martin Kosek <mkosek@redhat.com> | 2011-09-27 08:54:42 +0200 |
| commit | f76d33a296d9f0e48b0a6c32bfc87d33fabf3ec9 (patch) | |
| tree | 980b97c811da8b83b3bd9f8756146a5dea91a45d | |
| parent | 050d7f09447298b4036c7a3b6368282a9442cb99 (diff) | |
| download | freeipa-f76d33a296d9f0e48b0a6c32bfc87d33fabf3ec9.tar.gz freeipa-f76d33a296d9f0e48b0a6c32bfc87d33fabf3ec9.tar.xz freeipa-f76d33a296d9f0e48b0a6c32bfc87d33fabf3ec9.zip | |
Revert "Always require SSL in the Kerberos authorization block."
This patch broke installation of a new master. Reverting until
we develop a better solution.
This reverts commit f42da4357eac7e64e803b53c78d6cff9175d20a4.
| -rw-r--r-- | install/conf/ipa.conf | 3 | ||||
| -rw-r--r-- | install/tools/ipa-upgradeconfig | 2 |
2 files changed, 2 insertions, 3 deletions
diff --git a/install/conf/ipa.conf b/install/conf/ipa.conf index 2339387a7..72e3e4c01 100644 --- a/install/conf/ipa.conf +++ b/install/conf/ipa.conf @@ -1,5 +1,5 @@ # -# VERSION 3 - DO NOT REMOVE THIS LINE +# VERSION 2 - DO NOT REMOVE THIS LINE # # LoadModule auth_kerb_module modules/mod_auth_kerb.so @@ -45,7 +45,6 @@ WSGIScriptReloading Off # Protect /ipa with Kerberos <Location "/ipa"> - NSSRequireSSL AuthType Kerberos AuthName "Kerberos Login" KrbMethodNegotiate on diff --git a/install/tools/ipa-upgradeconfig b/install/tools/ipa-upgradeconfig index cae0964d5..1b08382e4 100644 --- a/install/tools/ipa-upgradeconfig +++ b/install/tools/ipa-upgradeconfig @@ -116,7 +116,7 @@ def upgrade(sub_dict, filename, template, add=False): if new < 0: print "%s not found." % template - if old < new: + if old < new or add: backup_file(filename, new) update_conf(sub_dict, filename, template) print "Upgraded %s to version %d" % (filename, new) |