diff options
| author | Rob Crittenden <rcritten@redhat.com> | 2011-12-08 17:21:07 -0500 |
|---|---|---|
| committer | Rob Crittenden <rcritten@redhat.com> | 2012-01-10 22:38:14 -0500 |
| commit | 4f5fe04be87dc117588a8e3b004cd6078844e537 (patch) | |
| tree | 68bd1871929f55f2532f63e12c90e8ee7664e878 /freeipa.spec.in | |
| parent | f65773fb878954e2db5b23c4777290d7949e2c3e (diff) | |
| download | freeipa.git-4f5fe04be87dc117588a8e3b004cd6078844e537.tar.gz freeipa.git-4f5fe04be87dc117588a8e3b004cd6078844e537.tar.xz freeipa.git-4f5fe04be87dc117588a8e3b004cd6078844e537.zip | |
Configure s4u2proxy during installation.
This creates a new container, cn=s4u2proxy,cn=etc,$SUFFIX
Within that container we control which services are allowed to
delegate tickets for other services. Right now that is limited
from the IPA HTTP to ldap services.
Requires a version of mod_auth_kerb that supports s4u2proxy
https://fedorahosted.org/freeipa/ticket/1098
Diffstat (limited to 'freeipa.spec.in')
| -rw-r--r-- | freeipa.spec.in | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/freeipa.spec.in b/freeipa.spec.in index 735b036c..312e17be 100644 --- a/freeipa.spec.in +++ b/freeipa.spec.in @@ -103,7 +103,7 @@ Requires: cyrus-sasl-gssapi%{?_isa} Requires: ntp Requires: httpd Requires: mod_wsgi -Requires: mod_auth_kerb +Requires: mod_auth_kerb >= 5.4-9 Requires: mod_nss >= 1.0.8-10 Requires: python-ldap Requires: python-krbV @@ -615,6 +615,9 @@ fi %ghost %attr(0644,root,apache) %config(noreplace) %{_sysconfdir}/ipa/default.conf %changelog +* Wed Jan 11 2012 Rob Crittenden <rcritten@redhat.com> - 2.2.0-6 +- Set min for mod_auth_kerb to 5.4-9 to pick up s4u2proxy support + * Tue Jan 10 2012 Alexander Bokovoy <abokovoy@redhat.com> - 2.2.0-5 - Fix dependency for samba4-devel package |