diff options
| author | Petr Vobornik <pvoborni@redhat.com> | 2016-06-30 19:16:32 +0200 |
|---|---|---|
| committer | Martin Basti <mbasti@redhat.com> | 2016-07-01 08:53:35 +0200 |
| commit | 88f7154f7fcb1ca86dcbeeaca3c220ed4b88d55f (patch) | |
| tree | d26c4bc70c8bedf2178a3f348bc87cea4ad04c1f /ipalib/base.py | |
| parent | f5eb71f75e5e205674ed8df1e4c6324602fbe733 (diff) | |
| download | freeipa-88f7154f7fcb1ca86dcbeeaca3c220ed4b88d55f.tar.gz freeipa-88f7154f7fcb1ca86dcbeeaca3c220ed4b88d55f.tar.xz freeipa-88f7154f7fcb1ca86dcbeeaca3c220ed4b88d55f.zip | |
webui: prevent infinite reload for users with krbbprincipal alias set
Web UI has inbuilt mechanism to reload in case response from a server
contains a different principal than the one loaded during Web UI
startup.
see rpc.js:381
With kerberos aliases support the loaded principal could be different
because krbprincipalname contained multiple values.
In such case krbcanonicalname should be used - it contains the same
principal as the one which will be in future API responses.
https://fedorahosted.org/freeipa/ticket/5927
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
Diffstat (limited to 'ipalib/base.py')
0 files changed, 0 insertions, 0 deletions