summaryrefslogtreecommitdiffstats
path: root/README
diff options
context:
space:
mode:
authorJan Pazdziora <jpazdziora@redhat.com>2015-04-24 13:34:18 +0200
committerJan Pazdziora <jpazdziora@redhat.com>2015-05-04 14:16:17 +0200
commitabd1ee22aabe2a7cbe8b719544499485e7037bb4 (patch)
treebc98d01f2a7bcb8d4e59ccf6d522dad9bc1f88ea /README
parent2de8600b1118e3632eae41bcbeb9f0393178ab55 (diff)
downloadmod_authnz_pam-abd1ee22aabe2a7cbe8b719544499485e7037bb4.tar.gz
mod_authnz_pam-abd1ee22aabe2a7cbe8b719544499485e7037bb4.tar.xz
mod_authnz_pam-abd1ee22aabe2a7cbe8b719544499485e7037bb4.zip
Add support for replacement placeholders %s and %u.
Diffstat (limited to 'README')
-rw-r--r--README14
1 files changed, 14 insertions, 0 deletions
diff --git a/README b/README
index 3f5d8e9..4e5d11e 100644
--- a/README
+++ b/README
@@ -80,6 +80,20 @@ FreeIPA server, the setting would be
AuthPAMExpiredRedirect https://<IPA-server>/ipa/ui/reset_password.html
+It is also possible to use placeholders in the URL that will be replaced
+with current location (for backreference) and username (to prefill)
+on the target page:
+
+ %s URL of the current page
+ %u The username that was used for the PAM authentication
+ %% The character % itself.
+
+For example for FreeIPA 4.1+, the value can actually be
+
+ https://<IPA-server>/ipa/ui/reset_password.html?url=%s
+
+SELinux:
+
On SELinux enabled systems, boolean allow_httpd_mod_auth_pam needs to
be enabled: