diff options
| author | Patrick Uiterwijk <puiterwijk@redhat.com> | 2016-12-20 08:04:23 +0000 |
|---|---|---|
| committer | Patrick Uiterwijk <puiterwijk@redhat.com> | 2016-12-20 08:04:23 +0000 |
| commit | 5ced2ec87ac07cd80bd4e45fa562958a839cb8ac (patch) | |
| tree | fbaaf0489210d824eb13bfa6bd8b476eb8f0aada /roles/ipa | |
| parent | 1e9775a1be773d5e78a7a12b3ef67291808a4d2c (diff) | |
| download | ansible-5ced2ec87ac07cd80bd4e45fa562958a839cb8ac.tar.gz ansible-5ced2ec87ac07cd80bd4e45fa562958a839cb8ac.tar.xz ansible-5ced2ec87ac07cd80bd4e45fa562958a839cb8ac.zip | |
Make IPA API available from external
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
Diffstat (limited to 'roles/ipa')
| -rw-r--r-- | roles/ipa/server/tasks/main.yml | 18 | ||||
| -rw-r--r-- | roles/ipa/server/templates/referer-override.conf | 2 |
2 files changed, 20 insertions, 0 deletions
diff --git a/roles/ipa/server/tasks/main.yml b/roles/ipa/server/tasks/main.yml index fa89da981..77821b77c 100644 --- a/roles/ipa/server/tasks/main.yml +++ b/roles/ipa/server/tasks/main.yml @@ -230,3 +230,21 @@ register: grant_repl_status_output changed_when: "'Type or value exists' not in grant_repl_status_output.stderr" failed_when: "'Type or value exists' not in grant_repl_status_output.stderr and 'modifying entry' not in grant_repl_status_output.stdout" + +# Make some httpd changes +- name: Configure referer override + template: src=referer-override.conf + dest=/etc/httpd/conf.d/referer-override.conf + notify: + - reload apache + tags: + - ipa/server + - config + +- name: Update xmlrpc_uri + lineinfile: dest=/etc/ipa/default.conf + regexp='xmlrpc_uri =' + line='xmlrpc_uri = https://id{{env_suffix}}.fedoraproject.org/ipa/xml' + tags: + - ipa/server + - config diff --git a/roles/ipa/server/templates/referer-override.conf b/roles/ipa/server/templates/referer-override.conf new file mode 100644 index 000000000..fc05a48e0 --- /dev/null +++ b/roles/ipa/server/templates/referer-override.conf @@ -0,0 +1,2 @@ +SetEnvIf Referer "https://id{{env_suffix}}.fedoraproject.org/ipa" HAVE_CORRECT_REFERER +RequestHeader set Referer "https://{{inventory_hostname}}/ipa" env=HAVE_CORRECT_REFERER |