summaryrefslogtreecommitdiffstats
path: root/install/conf
diff options
context:
space:
mode:
Diffstat (limited to 'install/conf')
-rw-r--r--install/conf/ipa-pki-proxy.conf13
1 files changed, 10 insertions, 3 deletions
diff --git a/install/conf/ipa-pki-proxy.conf b/install/conf/ipa-pki-proxy.conf
index 366ca15a1..354b340f0 100644
--- a/install/conf/ipa-pki-proxy.conf
+++ b/install/conf/ipa-pki-proxy.conf
@@ -1,4 +1,4 @@
-# VERSION 6 - DO NOT REMOVE THIS LINE
+# VERSION 7 - DO NOT REMOVE THIS LINE
ProxyRequests Off
@@ -27,9 +27,16 @@ ProxyRequests Off
</LocationMatch>
# matches for REST API
-<LocationMatch "^/ca/rest/account/login|^/ca/rest/account/logout|^/ca/rest/profiles">
+<LocationMatch "^/ca/rest/account/login|^/ca/rest/account/logout">
NSSOptions +StdEnvVars +ExportCertData +StrictRequire +OptRenegotiate
- NSSVerifyClient require
+ NSSVerifyClient optional
+ ProxyPassMatch ajp://localhost:$DOGTAG_PORT
+ ProxyPassReverse ajp://localhost:$DOGTAG_PORT
+</LocationMatch>
+
+<LocationMatch "^/ca/rest/profiles">
+ NSSOptions +StdEnvVars +ExportCertData +StrictRequire +OptRenegotiate
+ NSSVerifyClient none
ProxyPassMatch ajp://localhost:$DOGTAG_PORT
ProxyPassReverse ajp://localhost:$DOGTAG_PORT
</LocationMatch>