[Freeipa-devel] [freeipa PR#560][opened] rpcserver: x509_login: Handle unsuccessful certificate login gracefully

[dkupka]

   URL: https://github.com/freeipa/freeipa/pull/560
Author: dkupka
 Title: #560: rpcserver: x509_login: Handle unsuccessful certificate login gracefully
Action: opened

PR body:
"""
When mod_lookup_identity is unable to match user by certificate (and username)
it unsets http request's user. mod_auth_gssapi is then unable to get Kerberos
ticket and doesn't set KRB5CCNAME environment variable.
x509_login.__call__ now returns 401 in such case to indicate that request was
not authenticated.

https://pagure.io/freeipa/issue/6225
"""

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/560/head:pr560
git checkout pr560
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-pr-560.patch
Type: text/x-diff
Size: 1387 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20170309/9aa2c7a1/attachment.bin>