Mike Bonnet
ab53d2deb0
update copyright
2014-10-28 23:54:21 -04:00
Mike McLean
3fa9f36bbb
fix typos
2014-03-22 14:41:04 -04:00
Anthony Towns
7454bac53f
If attempting kerberos login for user with no kerberos principal,
...
try updating record rather than creating a user that already exists.
2014-03-17 21:20:35 -04:00
Mike McLean
073c65000c
use wsgi.url_scheme instead of HTTPS
2013-03-25 15:37:09 -04:00
Mike Bonnet
6236ae6d62
support SSL auth in mod_python compatibility mode
2012-05-11 21:29:06 -04:00
Mike McLean
54c0ed8438
Support wsgi in koji-hub and koji-web
...
- mod_python still supported, but deprecated
- mod_wsgi is the default
- koji-web now configured via web.conf
- new wsgi-friendly publisher for koji-web
- koji-web now has logging
2012-05-10 17:27:40 -04:00
Mike McLean
ab1559c5bb
retry whitelist
2011-11-03 11:58:46 -04:00
Mike McLean
a51ad5031f
graceful mass builder restart
2010-12-03 10:41:41 -05:00
Mike McLean
487ccdb2e3
clean up hub logging a bit
2010-03-12 15:34:02 -05:00
Mike McLean
59bde48e43
package list policy
2010-03-09 16:03:59 -05:00
Mike Bonnet
d7858380e7
remove unused locked parameter and extraneous select
...
Resolves: fh#157
2009-11-09 22:26:29 -05:00
Mike McLean
9333e61014
fix LoginCreatesUser check
2008-12-03 12:26:56 -05:00
Mike Bonnet
3d2a99f61e
make callers of createUser() responsible for checkin permissions
2007-03-22 13:07:40 -04:00
Mike Bonnet
1ab7d2c898
allow the username component of the client's DN to be configurable
2007-03-20 10:56:52 -04:00
Mike Bonnet
27100cd914
provide some more defaults for httpd options
2007-03-20 10:34:56 -04:00
Mike Bonnet
acd7cde21c
- centralize user creation in the Session class
...
- check user status on login as well as session creation
- don't even create sessions for blocked users
2007-03-19 17:27:48 -04:00
Mike Bonnet
4f100047eb
clean up httpd options handling in a couple places
2007-03-19 13:29:42 -04:00
Michael Bonnet
20ca1a8f84
- don't try to guess what kind of authentication we want to use in ClientSession.login() - allow clients to call login() (for user/password), krb_login() (for Kerberos), or ssl_login() (for client certificates)
...
- update all clients to call ssl_login() directly when appropriate
- rename references to NotAllowed -> ActionNotAllowed, because NotAllowed had already been renamed
- raise an error in CreateSSLContext instead of immediately exiting
2007-03-16 21:39:02 -04:00
Michael Bonnet
2cb2f3684d
enable authentication via SSL client certificates in the web interface
2007-03-16 21:39:02 -04:00
Michael Bonnet
95db5c1f63
enable authentication from the cli via SSL client certificates
2007-03-16 21:39:01 -04:00
Jesse Keating
5d7e66a17e
Initial code drop
2007-02-14 11:25:01 -05:00