summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorRob Crittenden <rcrit@ipa.greyoak.com>2008-08-14 11:46:10 -0400
committerRob Crittenden <rcrit@ipa.greyoak.com>2008-08-14 14:55:39 -0400
commit8edc9aa8aa9c109aa2c904161985288710748333 (patch)
treed2421e18bb4aa14921b2ddbd9867f2d9b2c3d145
parenta013fe5cc23a88520cdffc779d013b8e5407cf81 (diff)
downloadfreeipa-8edc9aa8aa9c109aa2c904161985288710748333.tar.gz
freeipa-8edc9aa8aa9c109aa2c904161985288710748333.tar.xz
freeipa-8edc9aa8aa9c109aa2c904161985288710748333.zip
Make Proxy directive wildcard match more specific so we can play nicer with other apps.
459061
-rw-r--r--ipa-server/xmlrpc-server/ipa.conf6
1 files changed, 3 insertions, 3 deletions
diff --git a/ipa-server/xmlrpc-server/ipa.conf b/ipa-server/xmlrpc-server/ipa.conf
index 1eca97757..85b4543af 100644
--- a/ipa-server/xmlrpc-server/ipa.conf
+++ b/ipa-server/xmlrpc-server/ipa.conf
@@ -1,5 +1,5 @@
#
-# VERSION 1 - DO NOT REMOVE THIS LINE
+# VERSION 2 - DO NOT REMOVE THIS LINE
#
# LoadModule auth_kerb_module modules/mod_auth_kerb.so
@@ -10,7 +10,7 @@ ProxyRequests Off
# This is required so the auto-configuration works with Firefox 2+
AddType application/java-archive jar
-<Proxy *>
+<ProxyMatch ^.*/ipa/ui.*$$>
AuthType Kerberos
AuthName "Kerberos Login"
KrbMethodNegotiate on
@@ -28,7 +28,7 @@ AddType application/java-archive jar
RequestHeader set X-Forwarded-Keytab %{KRB5CCNAME}e
# RequestHeader unset Authorization
-</Proxy>
+</ProxyMatch>
# The URI's with a trailing ! are those that aren't handled by the proxy
ProxyPass /ipa/ui http://localhost:8080/ipa/ui