[Freeipa-devel] [PATCH 0015] mod_auth_gssapi: Remove ntlmssp support and restrict, mechanism to krb5

[Gabe Alford]

Bump for push. May need a rebase.

On Wed, Jul 22, 2015 at 7:49 AM, Simo Sorce <ssorce at redhat.com> wrote:

> ----- Original Message -----
> > From: "Christian Heimes" <cheimes at redhat.com>
> > To: "freeipa-devel" <freeipa-devel at redhat.com>
> > Sent: Wednesday, July 22, 2015 9:32:59 AM
> > Subject: [Freeipa-devel] [PATCH 0015] mod_auth_gssapi: Remove ntlmssp
> support and restrict, mechanism to krb5
> >
> > By default mod_auth_gssapi allows all locally available mechanisms. If
> > the gssntlmssp package is installed, it also offers ntlmssp.  This has
> > the annoying side effect that some browser will pop up a
> > username/password request dialog if no Krb5 credentials are available.
> >
> > The patch restricts the mechanism to krb5 and removes ntlmssp and
> > iakerb support from Apache's ipa.conf.
> >
> > The new feature was added to mod_auth_gssapi 1.3.0.
> >
> > https://fedorahosted.org/freeipa/ticket/5114
>
> LGTM
>
> Simo.
>
> --
> Simo Sorce * Red Hat, Inc. * New York
>
> --
> Manage your subscription for the Freeipa-devel mailing list:
> https://www.redhat.com/mailman/listinfo/freeipa-devel
> Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20151125/fb69ab1e/attachment.htm>