From 57ef142ab094e156bb25b077ce16563dfde5a8ff Mon Sep 17 00:00:00 2001
From: Michael DeHaan <mdehaan@redhat.com>
Date: Mon, 3 Dec 2007 17:38:49 -0500
Subject: First start of pluggable authn/authz system for remote API + web
 interface, using Apache modules.

---
 config/cobbler.conf | 20 ++++++++++++++++++--
 1 file changed, 18 insertions(+), 2 deletions(-)

(limited to 'config')

diff --git a/config/cobbler.conf b/config/cobbler.conf
index 3ebc9e6..422420d 100644
--- a/config/cobbler.conf
+++ b/config/cobbler.conf
@@ -7,7 +7,6 @@ AliasMatch ^/cobbler(.*)?$ "/var/www/cobbler$1"
 
 <Directory "/var/www/cobbler">
     Options Indexes FollowSymLinks
-    AllowOverride None
     Order allow,deny
     Allow from all
 </Directory>
@@ -24,7 +23,7 @@ ProxyPassReverse /cobbler_api_rw http://localhost:25152/
 
 BrowserMatch "MSIE" AuthDigestEnableQueryStringHack=On
 
-# For Web UI, see also: /var/www/cgi-bin/cobbler/.htaccess
+# For misc CGI scripts
 
 <Directory "/var/www/cgi-bin/cobbler">
     AllowOverride All
@@ -33,4 +32,21 @@ BrowserMatch "MSIE" AuthDigestEnableQueryStringHack=On
     Allow from all
 </Directory>
 
+# mod_python WebUI/services
+
+<Directory "/var/www/cobbler/web/">
+   AuthType Basic
+   AuthName Cobbler
+   Require valid-user
+   SetHandler mod_python 
+   PythonAccessHandler index
+   PythonAuthenHandler index
+   PythonAuthZHandler  index
+   PythonHandler mod_python.publisher
+
+   # disable in production
+   PythonDebug on
+   PythonAutoReload on
+</Directory>
+
 
-- 
cgit