[Freeipa-devel] [PATCH] 226 Better error message for login of users from other realms

Petr Vobornik pvoborni at redhat.com
Wed Nov 14 18:04:33 UTC 2012


This is Web UI part of #3252 which depends on tbabej's python part which 
will be send by tbabej later.

When user from other realm than FreeIPA's tries to use Web UI (login via 
forms-based auth or with valid trusted realm ticket), he gets an 
unauthorized error with X-Ipa-Rejection-Reason=invalid-realm. Web UI 
responds with showing login dialog with following error message: 
'Invalid realm: Login for users from other realms is not supported.'.

Note: such users are not supported because they don't have a 
corresponding entry in LDAP which is needed for ACLs.

https://fedorahosted.org/freeipa/ticket/3252
-- 
Petr Vobornik
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-pvoborni-0226-Better-error-message-for-login-of-users-from-other-r.patch
Type: text/x-patch
Size: 5458 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20121114/53d0354f/attachment.bin>


More information about the Freeipa-devel mailing list