[Freeipa-users] Disable IPA Web UI auto-login
Wanderley Mayhé
wanderley.mayhe at ibp.org.br
Mon Feb 15 13:12:16 UTC 2016
Hello Rob
Regarding the thread
https://www.redhat.com/archives/freeipa-users/2010-July/msg00022.html I
have tested to set KrbMethodK5Passwd to on and restarted httpd but IPA
Web UI was still trying to auto-login user through a browser dialog.
In order to effectively disable this browser dialog, I had to edit
/etc/httpd/conf.d/ipa.conf
and add this line set KrbMethodNegotiate to off as follows (and restarted
httpd):
# Protect /ipa and everything below it in webspace with Apache Kerberos
auth
<Location "/ipa">
AuthType Kerberos
AuthName "Kerberos Login"
## KrbMethodNegotiate on
KrbMethodNegotiate off
KrbMethodK5Passwd off
KrbServiceName HTTP
KrbAuthRealms IBP.ORG.BR
Krb5KeyTab /etc/httpd/conf/ipa.keytab
KrbSaveCredentials on
KrbConstrainedDelegation on
Require valid-user
ErrorDocument 401 /ipa/errors/unauthorized.html
</Location>
Am I correct to assume that that JSON API will not be affected by this
change?
Is there any major problems this setting could cause?
Att
Wanderley
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20160215/8d344f35/attachment.htm>
More information about the Freeipa-users
mailing list