summaryrefslogtreecommitdiffstats
path: root/install/conf/ipa.conf
diff options
context:
space:
mode:
Diffstat (limited to 'install/conf/ipa.conf')
-rw-r--r--install/conf/ipa.conf10
1 files changed, 9 insertions, 1 deletions
diff --git a/install/conf/ipa.conf b/install/conf/ipa.conf
index e2b602c85..af58e517b 100644
--- a/install/conf/ipa.conf
+++ b/install/conf/ipa.conf
@@ -1,5 +1,5 @@
#
-# VERSION 18 - DO NOT REMOVE THIS LINE
+# VERSION 19 - DO NOT REMOVE THIS LINE
#
# This file may be overwritten on upgrades.
#
@@ -103,6 +103,14 @@ WSGIScriptReloading Off
Allow from all
</Location>
+# Custodia stuff is redirected to the custodia daemon
+# after authentication
+<Location "/ipa/keys/">
+ ProxyPass "unix:/run/httpd/ipa-custodia.sock|http://localhost/keys/"
+ RequestHeader set GSS_NAME %{GSS_NAME}s
+ RequestHeader set REMOTE_USER %{REMOTE_USER}s
+</Location>
+
# This is where we redirect on failed auth
Alias /ipa/errors "/usr/share/ipa/html"