From a9c7e28c3edd9b930a6ecdd0c65b329d5adfa79a Mon Sep 17 00:00:00 2001
From: Sunil Mohan Adapa <sunil@medhas.org>
Date: Thu, 31 Aug 2017 14:26:55 +0530
Subject: [PATCH] repro: Safety check to make sure pubtkt module is enabled

If pubtkt module is not enabled (rare) and if repro is enabled, Apache fails to
start. Make sure this effects only repro module. The single-sign-on
configuration already ensures that access is denied if pubtkt module is not
enabled, preventing unauthorized access.

Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
---
 data/etc/apache2/conf-available/repro-plinth.conf | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/data/etc/apache2/conf-available/repro-plinth.conf b/data/etc/apache2/conf-available/repro-plinth.conf
index 6ced94f09..8516c4324 100644
--- a/data/etc/apache2/conf-available/repro-plinth.conf
+++ b/data/etc/apache2/conf-available/repro-plinth.conf
@@ -5,5 +5,7 @@
 <Location /repro>
     ProxyPass http://localhost:5080
     Include includes/freedombox-single-sign-on.conf
-    TKTAuthToken "admin"
+    <IfModule mod_auth_pubtkt.c>
+        TKTAuthToken "admin"
+    </IfModule>
 </Location>