From b4297caa8bb4d6dfa95dc565169b2da622bafe86 Mon Sep 17 00:00:00 2001 From: Kevin McCarthy Date: Tue, 11 Sep 2007 14:45:53 -0700 Subject: Small fixes to proxyprovider. --- ipa-server/ipa-gui/ipagui/proxyprovider.py | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) (limited to 'ipa-server/ipa-gui/ipagui/proxyprovider.py') diff --git a/ipa-server/ipa-gui/ipagui/proxyprovider.py b/ipa-server/ipa-gui/ipagui/proxyprovider.py index 125198806..539d53ef4 100644 --- a/ipa-server/ipa-gui/ipagui/proxyprovider.py +++ b/ipa-server/ipa-gui/ipagui/proxyprovider.py @@ -31,19 +31,19 @@ class ProxyIdentity(object): user= property(_get_user) def _get_user_name(self): - if not self.user: + if not self._user: return None - return self.user.user_name + return self._user.user_name user_name= property(_get_user_name) - def _get_name(self): - if not self.user: + def _get_display_name(self): + if not self._user: return None - return self.user.name - user_name= property(_get_name) + return self._user.display_name + display_name= property(_get_display_name) def _get_anonymous(self): - return not self.user + return not self._user anonymous= property(_get_anonymous) def _get_permissions(self): -- cgit From b85668579ec3fc69c2ed709533f8bd8d00e0e7e9 Mon Sep 17 00:00:00 2001 From: "rcritten@redhat.com" Date: Fri, 14 Sep 2007 17:19:02 -0400 Subject: Use ticket forwarding with TurboGears. mod_proxy forwards the principal name and location of the keytab. In order for this keytab to be usable TurboGears and Apache will need to run as the same user. We will also need to listen only on localhost in TG. --- ipa-server/ipa-gui/ipagui/proxyprovider.py | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) (limited to 'ipa-server/ipa-gui/ipagui/proxyprovider.py') diff --git a/ipa-server/ipa-gui/ipagui/proxyprovider.py b/ipa-server/ipa-gui/ipagui/proxyprovider.py index 125198806..cc9d91644 100644 --- a/ipa-server/ipa-gui/ipagui/proxyprovider.py +++ b/ipa-server/ipa-gui/ipagui/proxyprovider.py @@ -1,6 +1,7 @@ from turbogears.identity.soprovider import * from turbogears.identity.visitor import * import logging +import os log = logging.getLogger("turbogears.identity") @@ -97,8 +98,10 @@ class ProxyIdentityProvider(SqlObjectIdentityProvider): def load_identity(self, visit_key): try: -# user_name= cherrypy.request.headers['X-FORWARDED-USER'] - user_name= "test@FREEIPA.ORG" + user_name= cherrypy.request.headers['X-FORWARDED-USER'] + os.environ["KRB5CCNAME"] = cherrypy.request.headers['X-FORWARDED-KEYTAB'] +# user_name = "test@FREEIPA.ORG" +# os.environ["KRB5CCNAME"] = "FILE:/tmp/krb5cc_500" except KeyError: return None set_login_attempted( True ) -- cgit