[Freeipa-devel] [PATCH] 961 webui: prevent infinite reload for users with krbbprincipal alias set

Martin Babinsky mbabinsk at redhat.com
Thu Jun 30 17:54:53 UTC 2016


On 06/30/2016 07:34 PM, Petr Vobornik wrote:
> Web UI has an inbuilt mechanism to reload in case response from a server
> contains a different principal than the one loaded during Web UI
> startup.
>
> see rpc.js:381
>
> With kerberos aliases support the loaded principal could be different
> because krbprincipalname contained multiple values.
>
> In such case krbcanonicalname should be used - it contains the same
> principal as the one which will be in future API responses.
>
> part of: https://fedorahosted.org/freeipa/ticket/5927
>

This patch is the WebUI counterpart to my WIP hacks to rpcserver.py 
which possible to login to webui via enterprise principal (e.g. 
use at email.com).

for me ACK.

-- 
Martin^3 Babinsky




More information about the Freeipa-devel mailing list