diff options
| author | rcritten <devnull@localhost> | 2007-09-10 16:33:01 -0400 |
|---|---|---|
| committer | rcritten <devnull@localhost> | 2007-09-10 16:33:01 -0400 |
| commit | 182fbe30945a8de005f00b460968dca7973342fb (patch) | |
| tree | 644f8efd633cbb41a387fb33e3deab8de20718b5 /ipa-server/ipa-gui/dev.cfg | |
| parent | 37d10e0c51dc289d815c05cd4d051e9d4120399e (diff) | |
| download | freeipa-182fbe30945a8de005f00b460968dca7973342fb.tar.gz freeipa-182fbe30945a8de005f00b460968dca7973342fb.tar.xz freeipa-182fbe30945a8de005f00b460968dca7973342fb.zip | |
Enable mod_proxy to sit in front of TurboGears and pass along the
kerberos principal name
Add an identity an visit class to TurboGears that can handle the user
without requiring a database
Update the UI to show the user correctly.
Note that this is currently disabled. It is hardcoded to always return the
principal test@FREEIPA.ORG in proxyprovider.py
It doesn't handle an unauthorized request because that can never happen.
Diffstat (limited to 'ipa-server/ipa-gui/dev.cfg')
| -rw-r--r-- | ipa-server/ipa-gui/dev.cfg | 13 |
1 files changed, 12 insertions, 1 deletions
diff --git a/ipa-server/ipa-gui/dev.cfg b/ipa-server/ipa-gui/dev.cfg index 7bb0fd8c4..7cc2441d0 100644 --- a/ipa-server/ipa-gui/dev.cfg +++ b/ipa-server/ipa-gui/dev.cfg @@ -13,8 +13,19 @@ # If you have sqlite, here's a simple default to get you started # in development -sqlobject.dburi="sqlite://%(current_dir_uri)s/devdata.sqlite" +# sqlobject.dburi="sqlite://%(current_dir_uri)s/devdata.sqlite" +# Our our sqlobject-derived proxy provider +identity.provider='proxyprovider' + +# the first thing checked on any request. We want to short-circuit this +# as early as possible +identity.source = 'visit' + +# Turn on identity and visit (visit is required for identity) +identity.on=True +visit.on=True +visit.manager='proxyvisit' # if you are using a database or table type without transactions # (MySQL default, for example), you should turn off transactions |