summaryrefslogtreecommitdiffstats
path: root/install/conf/ipa.conf
diff options
context:
space:
mode:
authorRob Crittenden <rcritten@redhat.com>2009-08-24 13:42:48 -0400
committerRob Crittenden <rcritten@redhat.com>2009-08-26 09:51:19 -0400
commit08fc563212faeca9aa4dc9339acedcac3751ca5d (patch)
tree324c0c5ed15a24b0a8a2fd8ecaf153e561c51530 /install/conf/ipa.conf
parent7a7041045e127e0537bd5eb1592bf58c846bb64d (diff)
downloadfreeipa.git-08fc563212faeca9aa4dc9339acedcac3751ca5d.tar.gz
freeipa.git-08fc563212faeca9aa4dc9339acedcac3751ca5d.tar.xz
freeipa.git-08fc563212faeca9aa4dc9339acedcac3751ca5d.zip
Generate CRLs and make them available from the IPA web server
Diffstat (limited to 'install/conf/ipa.conf')
-rw-r--r--install/conf/ipa.conf10
1 files changed, 10 insertions, 0 deletions
diff --git a/install/conf/ipa.conf b/install/conf/ipa.conf
index 9656fdf3..5ca13d37 100644
--- a/install/conf/ipa.conf
+++ b/install/conf/ipa.conf
@@ -41,6 +41,9 @@ Alias /ipa/errors "/usr/share/ipa/html"
# For the MIT Windows config files
Alias /ipa/config "/usr/share/ipa/html"
+# For CRL publishing
+Alias /ipa/crl "/var/lib/pki-ca/publish"
+
<Location "/ipa/xml">
AuthType Kerberos
AuthName "Kerberos Login"
@@ -72,6 +75,13 @@ Alias /ipa/config "/usr/share/ipa/html"
Allow from all
</Directory>
+<Directory "/var/lib/pki-ca/publish">
+ AllowOverride None
+ Options Indexes FollowSymLinks
+ Satisfy Any
+ Allow from all
+</Directory>
+
# Protect our CGIs
<Directory /var/www/cgi-bin>
AuthType Kerberos