#3810 [RFE] Option to disable forms-based login for UI
Opened 10 years ago by sbingram. Modified 7 years ago

The IPA UI originally required a Kerberos ticket-based login. Around the 3.0 release a forms-based login feature was added in order to accommodate users on devices that could not obtain a Kerberos ticket. For security reasons of not wanting to send credentials over even an encrypted connection, it would be nice to be able to disable the forms-based login feature and return to the original configuration requiring a Kerberos ticket to authenticate.

Petr Vobornik repors the following items are necessary to achieve this:

  1. deny access to /ipa/session/login_password
  2. create UI plugin to change Web UI unauthorized_dialog
  3. deny access to /ipa/ui/login.html

Thank you for submitting this ticket. We do not have cycles to do it now, however this should not be a very hard feature to implement. Would you be open to try to implement it? We will definitely help and guide. Please let us know if you are up to the challenge.

Metadata Update from @sbingram:
- Issue assigned to someone
- Issue set to the milestone: Future Releases

7 years ago

Log in to comment on this ticket.

Metadata