diff options
| author | Simo Sorce <simo@redhat.com> | 2016-08-19 09:23:55 -0400 |
|---|---|---|
| committer | Simo Sorce <simo@redhat.com> | 2017-02-14 17:36:04 -0500 |
| commit | 8b88ef00331f1fbb28802b3eba5ced62daeffc9e (patch) | |
| tree | 3236bbad94a1ada157e62070960948e9e5a0b08f /init | |
| parent | 8d3bea8accb9814b3a973f4a606110fee78baf72 (diff) | |
| download | freeipa-8b88ef00331f1fbb28802b3eba5ced62daeffc9e.tar.gz freeipa-8b88ef00331f1fbb28802b3eba5ced62daeffc9e.tar.xz freeipa-8b88ef00331f1fbb28802b3eba5ced62daeffc9e.zip | |
Change session handling
Stop using memcache, use mod_auth_gssapi filesystem based ccaches.
Remove custom session handling, use mod_auth_gssapi and mod_session to
establish and keep a session cookie.
Add loopback to mod_auth_gssapi to do form absed auth and pass back a
valid session cookie.
And now that we do not remove ccaches files to move them to the
memcache, we can avoid the risk of pollutting the filesystem by keeping
a common ccache file for all instances of the same user.
https://fedorahosted.org/freeipa/ticket/5959
Signed-off-by: Simo Sorce <simo@redhat.com>
Diffstat (limited to 'init')
| -rw-r--r-- | init/Makefile.am | 6 | ||||
| -rw-r--r-- | init/ipa_memcached.in | 5 | ||||
| -rw-r--r-- | init/systemd/Makefile.am | 2 | ||||
| -rw-r--r-- | init/systemd/ipa_memcached.service.in | 12 | ||||
| -rw-r--r-- | init/tmpfilesd/ipa.conf.in | 1 |
5 files changed, 0 insertions, 26 deletions
diff --git a/init/Makefile.am b/init/Makefile.am index 47f844ac1..8f4d1d0a8 100644 --- a/init/Makefile.am +++ b/init/Makefile.am @@ -8,13 +8,7 @@ dist_sysconfenv_DATA = \ ipa-dnskeysyncd \ ipa-ods-exporter -nodist_sysconfenv_DATA = \ - ipa_memcached - CLEANFILES = $(nodist_sysconfenv_DATA) -dist_noinst_DATA = \ - ipa_memcached.in - %: %.in Makefile sed -e 's|@localstatedir[@]|$(localstatedir)|g' '$(srcdir)/$@.in' >$@ diff --git a/init/ipa_memcached.in b/init/ipa_memcached.in deleted file mode 100644 index 56701383d..000000000 --- a/init/ipa_memcached.in +++ /dev/null @@ -1,5 +0,0 @@ -SOCKET_PATH=@localstatedir@/run/ipa_memcached/ipa_memcached -USER=apache -MAXCONN=1024 -CACHESIZE=64 -OPTIONS= diff --git a/init/systemd/Makefile.am b/init/systemd/Makefile.am index e978fe974..325e85748 100644 --- a/init/systemd/Makefile.am +++ b/init/systemd/Makefile.am @@ -4,12 +4,10 @@ AUTOMAKE_OPTIONS = 1.7 dist_noinst_DATA = \ ipa-custodia.service.in \ - ipa_memcached.service.in \ ipa.service.in systemdsystemunit_DATA = \ ipa-custodia.service \ - ipa_memcached.service \ ipa.service CLEANFILES = $(systemdsystemunit_DATA) diff --git a/init/systemd/ipa_memcached.service.in b/init/systemd/ipa_memcached.service.in deleted file mode 100644 index 0e163203a..000000000 --- a/init/systemd/ipa_memcached.service.in +++ /dev/null @@ -1,12 +0,0 @@ -[Unit] -Description=IPA memcached daemon, increases IPA server performance -After=network.target - -[Service] -Type=forking -EnvironmentFile=@sysconfenvdir@/ipa_memcached -PIDFile=@localstatedir@/run/ipa_memcached/ipa_memcached.pid -ExecStart=@bindir@/memcached -d -s $SOCKET_PATH -u $USER -m $CACHESIZE -c $MAXCONN -P @localstatedir@/run/ipa_memcached/ipa_memcached.pid $OPTIONS - -[Install] -WantedBy=multi-user.target diff --git a/init/tmpfilesd/ipa.conf.in b/init/tmpfilesd/ipa.conf.in index 4954000a3..5ac96f20f 100644 --- a/init/tmpfilesd/ipa.conf.in +++ b/init/tmpfilesd/ipa.conf.in @@ -1,4 +1,3 @@ -d @localstatedir@/run/ipa_memcached 0700 apache apache d @localstatedir@/run/ipa 0700 root root d @localstatedir@/run/httpd/ipa 0700 apache apache d @localstatedir@/run/httpd/ipa/clientcaches 0700 apache apache |