[Freeipa-devel] [PATCH 0015] mod_auth_gssapi: Remove ntlmssp support and restrict, mechanism to krb5

[Martin Basti]

On 25.11.2015 16:36, Gabe Alford wrote:
> Bump for push. May need a rebase.
Thank you, rebased.
Pushed to master: b6c893aae63b6b77871c775d062a5c7e1c470ad9

>
> On Wed, Jul 22, 2015 at 7:49 AM, Simo Sorce <ssorce at redhat.com 
> <mailto:ssorce at redhat.com>> wrote:
>
>     ----- Original Message -----
>     > From: "Christian Heimes" <cheimes at redhat.com
>     <mailto:cheimes at redhat.com>>
>     > To: "freeipa-devel" <freeipa-devel at redhat.com
>     <mailto:freeipa-devel at redhat.com>>
>     > Sent: Wednesday, July 22, 2015 9:32:59 AM
>     > Subject: [Freeipa-devel] [PATCH 0015] mod_auth_gssapi: Remove
>     ntlmssp support and restrict, mechanism to krb5
>     >
>     > By default mod_auth_gssapi allows all locally available
>     mechanisms. If
>     > the gssntlmssp package is installed, it also offers ntlmssp. 
>     This has
>     > the annoying side effect that some browser will pop up a
>     > username/password request dialog if no Krb5 credentials are
>     available.
>     >
>     > The patch restricts the mechanism to krb5 and removes ntlmssp and
>     > iakerb support from Apache's ipa.conf.
>     >
>     > The new feature was added to mod_auth_gssapi 1.3.0.
>     >
>     > https://fedorahosted.org/freeipa/ticket/5114
>
>     LGTM
>
>     Simo.
>
>     --
>     Simo Sorce * Red Hat, Inc. * New York
>
>     --
>     Manage your subscription for the Freeipa-devel mailing list:
>     https://www.redhat.com/mailman/listinfo/freeipa-devel
>     Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
>
>
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20151126/336e7073/attachment.htm>