[Freeipa-devel] [PATCH 0015] mod_auth_gssapi: Remove ntlmssp support and restrict, mechanism to krb5

[Christian Heimes]

By default mod_auth_gssapi allows all locally available mechanisms. If
the gssntlmssp package is installed, it also offers ntlmssp.  This has
the annoying side effect that some browser will pop up a
username/password request dialog if no Krb5 credentials are available.

The patch restricts the mechanism to krb5 and removes ntlmssp and
iakerb support from Apache's ipa.conf.

The new feature was added to mod_auth_gssapi 1.3.0.

https://fedorahosted.org/freeipa/ticket/5114
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-cheimes-0015-mod_auth_gssapi-Remove-ntlmssp-support-and-restrict-.patch
Type: text/x-patch
Size: 1828 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20150722/041ef593/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 455 bytes
Desc: OpenPGP digital signature
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20150722/041ef593/attachment.sig>