[Freeipa-devel] [PATCH] ticket forwarding and TurboGears

[Pete Rowley]

Rob Crittenden wrote:
> This means we can do away with all the proxying mess and not issue a 
> client cert to the web server.
>
> Do we want to go ahead and remove that now or leave it in as dead 
> code? We can remove the proxy ACIs which will prevent people from 
> proxying in and leave the code alone for a while I suppose.
I think that is a decent way of dealing with this. Since the code is 
already written we can use it as a backup in case ticket forwarding is 
not appropriate for some reason. Once real deployments have kicked the 
tires a few times we will be in a better position to see what may be needed.

-- 
Pete

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3241 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20070913/359238a6/attachment.bin>