[Freeipa-devel] [PATCH] 961 webui: prevent infinite reload for users with krbbprincipal alias set

Martin Basti mbasti at redhat.com
Fri Jul 1 06:55:31 UTC 2016



On 30.06.2016 19:54, Martin Babinsky wrote:
> On 06/30/2016 07:34 PM, Petr Vobornik wrote:
>> Web UI has an inbuilt mechanism to reload in case response from a server
>> contains a different principal than the one loaded during Web UI
>> startup.
>>
>> see rpc.js:381
>>
>> With kerberos aliases support the loaded principal could be different
>> because krbprincipalname contained multiple values.
>>
>> In such case krbcanonicalname should be used - it contains the same
>> principal as the one which will be in future API responses.
>>
>> part of: https://fedorahosted.org/freeipa/ticket/5927
>>
>
> This patch is the WebUI counterpart to my WIP hacks to rpcserver.py 
> which possible to login to webui via enterprise principal (e.g. 
> use at email.com).
>
> for me ACK.
>
Pushed to master: 88f7154f7fcb1ca86dcbeeaca3c220ed4b88d55f




More information about the Freeipa-devel mailing list