[Freeipa-devel] [PATCH] jderose 025 Add mod_python adapter and some UI tuning

Fri Oct 23 18:36:15 UTC 2009

Jason Gerard DeRose wrote:
> This patch fixes the depreciated mod_proxy config (was used for
> TurboGears) and lays a bit of related ground work for my turning patch,
> which I still have a few days of work on.
> 
>

The ipa-rewrite stuff is actually needed. It does a couple of things:

- routes from / to /ipa/ui so we can helpfully send users to the right 
place but also allow other things to co-exist
- redirects to the FQDN so that kerberos will work as expected
- forces SSL

That said, I haven't been able to get the UI working with this patch. 
I'm using curl:

% curl -kv --negotiate -u : https://luna.example.com/ipa/ui/Command

The authentication works ok but when it goes to fetch the page I get:

HTTP/1.1 405 Method Not Allowed
Date: Fri, 23 Oct 2009 18:34:39 GMT
Server: Apache/2.2.11 (Fedora)
Allow: POST,TRACE
Content-Length: 318
Connection: close
Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>405 Method Not Allowed</title>
</head><body>
<h1>Method Not Allowed</h1>
<p>The requested method GET is not allowed for the URL /ipa/ui/Command.</p>
<hr>
<address>Apache/2.2.11 (Fedora) Server at luna.example.com Port 
443</address>
</body></html>

rob
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20091023/e6dce8e1/attachment.bin>