From 66c94678e1ca2f046245a546061a338ebc95d937 Mon Sep 17 00:00:00 2001
From: Kevin Fenzi <kevin@scrye.com>
Date: Nov 05 2020 00:31:42 +0000
Subject: ipa: try and fix the popup auth window that comes up on windows


Signed-off-by: Kevin Fenzi <kevin@scrye.com>

---

diff --git a/roles/ipa/server/files/ipa-rewrite.conf b/roles/ipa/server/files/ipa-rewrite.conf
index 7e0c29b..9c71d92 100644
--- a/roles/ipa/server/files/ipa-rewrite.conf
+++ b/roles/ipa/server/files/ipa-rewrite.conf
@@ -20,3 +20,9 @@ RewriteEngine on
 
 # Rewrite for plugin index, make it like it's a static file
 RewriteRule ^/ipa/ui/js/freeipa/plugins.js$    /ipa/wsgi/plugins.py [PT]
+
+# The following disables the annoying kerberos popup for browsers on windows
+RewriteCond %{HTTP_COOKIE} !ipa_session
+RewriteCond %{HTTP_REFERER} ^(.+)/ipa/ui/$
+RewriteRule ^/ipa/session/json$ - [R=401,L]
+RedirectMatch 401 ^/ipa/session/login_kerberos