summaryrefslogtreecommitdiffstats
path: root/ipa-server/xmlrpc-server/ipa.conf
diff options
context:
space:
mode:
Diffstat (limited to 'ipa-server/xmlrpc-server/ipa.conf')
-rw-r--r--ipa-server/xmlrpc-server/ipa.conf7
1 files changed, 7 insertions, 0 deletions
diff --git a/ipa-server/xmlrpc-server/ipa.conf b/ipa-server/xmlrpc-server/ipa.conf
index 359fe223..2f9c82e0 100644
--- a/ipa-server/xmlrpc-server/ipa.conf
+++ b/ipa-server/xmlrpc-server/ipa.conf
@@ -2,6 +2,13 @@
ProxyRequests Off
+# Make all requests use SSL except for Kerberos authentication errors
+RewriteEngine on
+
+RewriteCond %{SERVER_PORT} !^443$$
+RewriteCond %{REQUEST_URI} !^/(errors)/
+RewriteRule ^/(.*) https://%{SERVER_NAME}/$$1 [L,R,NC]
+
<Proxy *>
AuthType Kerberos
AuthName "Kerberos Login"