diff options
| author | Rob Crittenden <rcritten@redhat.com> | 2013-12-03 09:14:00 -0700 |
|---|---|---|
| committer | Petr Viktorin <pviktori@redhat.com> | 2014-04-30 21:57:27 +0200 |
| commit | 64dcb1ec76fa706320746720431ef815eb3e9ecd (patch) | |
| tree | fe2884e42b5dcc11cdd640e7d2b790d20d86e63b /smartproxy/ipa-smartproxy-apache.conf | |
| parent | 923c7ab7bc0eb361dae6e6fb3f05854499625368 (diff) | |
| download | freeipa-64dcb1ec76fa706320746720431ef815eb3e9ecd.tar.gz freeipa-64dcb1ec76fa706320746720431ef815eb3e9ecd.tar.xz freeipa-64dcb1ec76fa706320746720431ef815eb3e9ecd.zip | |
Implement an IPA Foreman smartproxy server
This currently server supports only host and hostgroup commands for
retrieving, adding and deleting entries.
The incoming requests are completely unauthenticated and by default
requests must be local.
Utilize GSS-Proxy to manage the TGT.
Configuration information is in the ipa-smartproxy man page.
Design: http://www.freeipa.org/page/V3/Smart_Proxy
https://fedorahosted.org/freeipa/ticket/4128
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
Diffstat (limited to 'smartproxy/ipa-smartproxy-apache.conf')
| -rw-r--r-- | smartproxy/ipa-smartproxy-apache.conf | 30 |
1 files changed, 30 insertions, 0 deletions
diff --git a/smartproxy/ipa-smartproxy-apache.conf b/smartproxy/ipa-smartproxy-apache.conf new file mode 100644 index 000000000..53a62691f --- /dev/null +++ b/smartproxy/ipa-smartproxy-apache.conf @@ -0,0 +1,30 @@ +Listen 8090 + +<VirtualHost *:8090> + + WSGIDaemonProcess smartproxy user=smartproxy processes=2 threads=1 + WSGIProcessGroup smartproxy + + WSGIScriptAlias /realm /usr/share/ipa/smartproxy/ipa-smartproxy.py + WSGIScriptAlias /features /usr/share/ipa/smartproxy/ipa-smartproxy.py + WSGIScriptAlias /ipa/smartproxy /usr/share/ipa/smartproxy/ipa-smartproxy.py + + <Location "/realm"> + Satisfy Any + Order Deny,Allow + Allow from all + </Location> + + <Location "/features"> + Satisfy Any + Order Deny,Allow + Allow from all + </Location> + + <Location "/ipa/smartproxy"> + Satisfy Any + Order Deny,Allow + Allow from all + </Location> + +</VirtualHost> |