diff options
| author | Petr Vobornik <pvoborni@redhat.com> | 2012-11-14 09:35:03 +0100 |
|---|---|---|
| committer | Petr Vobornik <pvoborni@redhat.com> | 2012-12-06 17:02:03 +0100 |
| commit | 8d892f442f27026ac7195f6d9720b6da046ff477 (patch) | |
| tree | 31992b4581895b358aa0b2689d7496f7c4b31255 /daemons/ipa-slapi-plugins/ipa-pwd-extop | |
| parent | e05a720b12ae9bf8a39fa3103bdd61dc065dface (diff) | |
| download | freeipa-8d892f442f27026ac7195f6d9720b6da046ff477.tar.gz freeipa-8d892f442f27026ac7195f6d9720b6da046ff477.tar.xz freeipa-8d892f442f27026ac7195f6d9720b6da046ff477.zip | |
Better error message for login of users from other realms
When user from other realm than FreeIPA's tries to use Web UI (login via forms-based auth or with valid trusted realm ticket), he gets an unauthorized error with X-Ipa-Rejection-Reason=denied. Web UI responds with showing login dialog with following error message: 'Sorry you
are not allowed to access this service.'.
Note: such users are not supported because they don't have a corresponding entry in LDAP which is needed for ACLs.
https://fedorahosted.org/freeipa/ticket/3252
denied change
Diffstat (limited to 'daemons/ipa-slapi-plugins/ipa-pwd-extop')
0 files changed, 0 insertions, 0 deletions