#31 Add Apache identity modules as an info plugin
Closed: Fixed None Opened 4 years ago by rcritten.

Add an info plugin for users authenticated via modules like in http://www.freeipa.org/page/Web_App_Authentication

This is effectively taking the Apache modules and integrating them into Ipsilon.

milestone: => 1.0 m2
owner: simo => rcritten
status: new => assigned

One needs to be careful to do manual cleanup between installs. I had pam enabled at one point and it was being called before the form plugin which caused Apache to not do the authentication so mod_lookup_identity didn't have a REMOTE_USER.

The installer doesn't un-set anything previously set in the admin sqlite file, it only adds new configuration.

Just to be safe, I ended up with this CLI for install on an IPA-based system:

ipsilon-server-install --ipa=yes --info-identity=yes --pam=no --form=yes

patch_available: => 0

SSSD is missing a schema entry for user_attributes in the ifp section which means I can't configure sssd when the identity plugin is selected. Opened sssd ticket https://fedorahosted.org/sssd/ticket/2586

Fields changed

patch_available: 0 => 1

Pushed to master.
Commit IDs:

resolution: => fixed
status: assigned => closed

Fields changed

rhbz: => 0

Metadata Update from @nkinder:
- Issue assigned to rcritten
- Issue set to the milestone: 1.0 m2

2 years ago

Login to comment on this ticket.