nik/FreedomBox
1
0
Fork 0
mirror of https://github.com/freedombox/FreedomBox.git synced 2026-09-19 04:59:01 +00:00
Code Issues Packages Projects Releases Wiki Activity

SSO: Add check to see if auth_pubtkt module is available

Browse Source 
- Solves bug #890
- Since Apache might be started before Plinth setup is ever run, we
have to handle the case where the auth_pubtkt module may not be available.
This commit is contained in:
Joseph Nuthalpati 2017-08-02 16:57:48 +05:30
parent 3b7b271293
commit 72208f440d
No known key found for this signature in database
GPG Key ID: 5398F00A2FA43C35
1 changed files with 15 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
data/etc/apache2/includes/freedombox-single-sign-on.conf
View File

@ -1,9 +1,15 @@
TKTAuthPublicKey /etc/apache2/auth-pubtkt-keys/pubkey.pem <IfModule mod_auth_pubtkt.c>
TKTAuthLoginURL /plinth/accounts/sso/login/ TKTAuthPublicKey /etc/apache2/auth-pubtkt-keys/pubkey.pem
TKTAuthBackArgName next TKTAuthLoginURL /plinth/accounts/sso/login/
TKTAuthDigest SHA1 TKTAuthBackArgName next
TKTAuthRefreshURL /plinth/accounts/sso/refresh/ TKTAuthDigest SHA1
TKTAuthUnauthURL /plinth TKTAuthRefreshURL /plinth/accounts/sso/refresh/
AuthType mod_auth_pubtkt TKTAuthUnauthURL /plinth
AuthName "FreedomBox Single Sign On" AuthType mod_auth_pubtkt
Require valid-user AuthName "FreedomBox Single Sign On"
Require valid-user
</IfModule>
<IfModule !mod_auth_pubtkt.c>
Deny from all
</IfModule>