Ken Dreyer
0c8501e6ea
hub: remove global SSLVerifyClient option
...
Stop recommending that clients set "SSLVerifyClient require" globally on
the hub httpd server.
In the latest versions of the koji CLI, we perform many RPCs anonymously
in order to improve performance, and this is incompatible with hubs that
enforce "SSLVerifyClient require" globally.
2021-01-13 14:35:20 +01:00
Ken Dreyer
c1511ae182
hub: remove "GssapiLocalName off" setting
...
mod_auth_gssapi already defaults "GssapiLocalName" to "off". Simplify
our configuration and just remove this line.
2020-07-01 11:40:29 +02:00
Ken Dreyer
9014fac420
hub: remove "GssapiSSLonly Off" option
...
mod_auth_gssapi already defaults "GssapiSSLonly" to "off", and in fact
this is not something we want to recommend to users.
2020-06-24 14:48:51 +02:00
Yu Ming Zhu
5629ff59a0
doc: GssapiLocalName should be off
2019-10-10 13:04:06 +00:00
Yuming Zhu
0c4d57d958
adding some notes in documents
2019-10-10 13:02:55 +00:00
Mike McLean
a7b496961c
disable mod_wsgi reloading
...
Fixes: https://pagure.io/koji/issue/875
2019-03-19 11:46:50 -04:00
Ken Dreyer
5ed66ca927
hub: unlimited NameWidth for kojifiles Apache location
...
Prior to this change, Apache's mod_autoindex would limit the file name
lengths in when it displayed directory and file lists under the archive
location /kojifiles.
Koji archive filenames are often be longer than mod_autoindex's default
of 20 bytes.
Configure mod_autoindex to show the entire filenames. This makes it
easier for users to browse /kojifiles to see at a glance which files are
stored.
2018-11-13 17:43:23 -05:00
Tomas Kopecek
b98d93d788
drop mod_python support
...
Fixes: https://pagure.io/koji/issue/466
2017-07-06 14:04:19 +02:00
Mike McLean
a9d46d0fe2
work around in OpenSSL issue on the hub
2016-11-23 14:16:25 -05:00
Pavol Babincak
b964487d57
Configure httpd's access control automatically with IfVersion
...
See documentation for upgrading to 2.4:
https://httpd.apache.org/docs/2.4/upgrading.html#access
2016-02-05 09:07:24 -05:00
Mike McLean
1bf69b7c7e
add a note about FollowSymLinks in hub httpd conf
2015-05-15 13:03:20 -04:00
Mathieu Bridon
27aa2f51e3
files: Tell Apache to let clients follow symlinks
...
This is necessary for builds to succeed, as they will try to access URLs
like this:
http://koji.fr/kojifiles/repos/$tag/$repoid/$arch/toplink/packages/ ...
And on the filesystem, that "toplink" folder is in fact a symlink to the
kojifiles root.
2015-05-15 12:51:56 -04:00
Mike McLean
9d433423fe
update httpd access directives
2014-11-24 11:16:32 -05:00
Mike McLean
54c0ed8438
Support wsgi in koji-hub and koji-web
...
- mod_python still supported, but deprecated
- mod_wsgi is the default
- koji-web now configured via web.conf
- new wsgi-friendly publisher for koji-web
- koji-web now has logging
2012-05-10 17:27:40 -04:00
Mike McLean
73d44e199a
support for split storage
2011-03-18 13:57:38 -04:00
Mike McLean
eb5b28e220
provide example ssl config to support koji < 1.4.0 clients
2010-07-08 22:04:26 -04:00
Mike Bonnet
ebc9e7d3ac
append "/ssllogin" to the hub URL when logging in via SSL, so we only need to require client certificates on that specific URL
2010-07-08 21:55:15 -04:00
Mike Bonnet
62180c109f
replace configuration in kojihub.conf with a reference to hub.conf
2009-02-18 14:56:54 -05:00
Dennis Gilmore
1a362b7916
patch from Toshio adding support to use passwd auth for database connection.
2008-08-18 01:05:22 -05:00
Mike Bonnet
8d71d63f77
make email notifications work
...
- always send notifications to the build submitter and the package owner
- default smtphost in kojid.conf
2007-04-30 17:57:18 -04:00
Mike Bonnet
9ed2f9f5e7
do not allow users to manually specify their notification email address, construct it from their username and the "EmailDomain" option
2007-04-30 16:00:31 -04:00
Mike Bonnet
f71a80d167
- make client certificate config global (in ssl.conf) to avoid SSL renegotiation and buffer overruns caused by it
...
- reorganize auth config in kojihub.conf
- don't set krb_principal for new hosts unless HostPrincipalFormat is set
2007-03-27 11:56:28 -04:00
Mike Bonnet
f2d8024467
- url-encode filenames on the taskinfo page
...
- expand the page content to full width
- remove unused /koji-hub alias
2007-03-24 17:13:54 -04:00
Mike Bonnet
2a3f78ead0
typo
2007-03-20 18:05:24 -04:00
Mike Bonnet
1ab7d2c898
allow the username component of the client's DN to be configurable
2007-03-20 10:56:52 -04:00
Michael Bonnet
2cb2f3684d
enable authentication via SSL client certificates in the web interface
2007-03-16 21:39:02 -04:00
Michael Bonnet
95db5c1f63
enable authentication from the cli via SSL client certificates
2007-03-16 21:39:01 -04:00
Jesse Keating
034de335ad
Move web content from /var/www to /usr/share
2007-02-20 09:51:08 -05:00
Jesse Keating
5d7e66a17e
Initial code drop
2007-02-14 11:25:01 -05:00