Commit graph

29 commits

Author SHA1 Message Date
Ken Dreyer
0c8501e6ea hub: remove global SSLVerifyClient option
Stop recommending that clients set "SSLVerifyClient require" globally on
the hub httpd server.

In the latest versions of the koji CLI, we perform many RPCs anonymously
in order to improve performance, and this is incompatible with hubs that
enforce "SSLVerifyClient require" globally.
2021-01-13 14:35:20 +01:00
Ken Dreyer
c1511ae182 hub: remove "GssapiLocalName off" setting
mod_auth_gssapi already defaults "GssapiLocalName" to "off". Simplify
our configuration and just remove this line.
2020-07-01 11:40:29 +02:00
Ken Dreyer
9014fac420 hub: remove "GssapiSSLonly Off" option
mod_auth_gssapi already defaults "GssapiSSLonly" to "off", and in fact
this is not something we want to recommend to users.
2020-06-24 14:48:51 +02:00
Yu Ming Zhu
5629ff59a0 doc: GssapiLocalName should be off 2019-10-10 13:04:06 +00:00
Yuming Zhu
0c4d57d958 adding some notes in documents 2019-10-10 13:02:55 +00:00
Mike McLean
a7b496961c disable mod_wsgi reloading
Fixes: https://pagure.io/koji/issue/875
2019-03-19 11:46:50 -04:00
Ken Dreyer
5ed66ca927 hub: unlimited NameWidth for kojifiles Apache location
Prior to this change, Apache's mod_autoindex would limit the file name
lengths in when it displayed directory and file lists under the archive
location /kojifiles.

Koji archive filenames are often be longer than mod_autoindex's default
of 20 bytes.

Configure mod_autoindex to show the entire filenames. This makes it
easier for users to browse /kojifiles to see at a glance which files are
stored.
2018-11-13 17:43:23 -05:00
Tomas Kopecek
b98d93d788 drop mod_python support
Fixes: https://pagure.io/koji/issue/466
2017-07-06 14:04:19 +02:00
Mike McLean
a9d46d0fe2 work around in OpenSSL issue on the hub 2016-11-23 14:16:25 -05:00
Pavol Babincak
b964487d57 Configure httpd's access control automatically with IfVersion
See documentation for upgrading to 2.4:
https://httpd.apache.org/docs/2.4/upgrading.html#access
2016-02-05 09:07:24 -05:00
Mike McLean
1bf69b7c7e add a note about FollowSymLinks in hub httpd conf 2015-05-15 13:03:20 -04:00
Mathieu Bridon
27aa2f51e3 files: Tell Apache to let clients follow symlinks
This is necessary for builds to succeed, as they will try to access URLs
like this:

  http://koji.fr/kojifiles/repos/$tag/$repoid/$arch/toplink/packages/...

And on the filesystem, that "toplink" folder is in fact a symlink to the
kojifiles root.
2015-05-15 12:51:56 -04:00
Mike McLean
9d433423fe update httpd access directives 2014-11-24 11:16:32 -05:00
Mike McLean
54c0ed8438 Support wsgi in koji-hub and koji-web
- mod_python still supported, but deprecated
 - mod_wsgi is the default
 - koji-web now configured via web.conf
 - new wsgi-friendly publisher for koji-web
 - koji-web now has logging
2012-05-10 17:27:40 -04:00
Mike McLean
73d44e199a support for split storage 2011-03-18 13:57:38 -04:00
Mike McLean
eb5b28e220 provide example ssl config to support koji < 1.4.0 clients 2010-07-08 22:04:26 -04:00
Mike Bonnet
ebc9e7d3ac append "/ssllogin" to the hub URL when logging in via SSL, so we only need to require client certificates on that specific URL 2010-07-08 21:55:15 -04:00
Mike Bonnet
62180c109f replace configuration in kojihub.conf with a reference to hub.conf 2009-02-18 14:56:54 -05:00
Dennis Gilmore
1a362b7916 patch from Toshio adding support to use passwd auth for database connection. 2008-08-18 01:05:22 -05:00
Mike Bonnet
8d71d63f77 make email notifications work
- always send notifications to the build submitter and the package owner
  - default smtphost in kojid.conf
2007-04-30 17:57:18 -04:00
Mike Bonnet
9ed2f9f5e7 do not allow users to manually specify their notification email address, construct it from their username and the "EmailDomain" option 2007-04-30 16:00:31 -04:00
Mike Bonnet
f71a80d167 - make client certificate config global (in ssl.conf) to avoid SSL renegotiation and buffer overruns caused by it
- reorganize auth config in kojihub.conf
- don't set krb_principal for new hosts unless HostPrincipalFormat is set
2007-03-27 11:56:28 -04:00
Mike Bonnet
f2d8024467 - url-encode filenames on the taskinfo page
- expand the page content to full width
- remove unused /koji-hub alias
2007-03-24 17:13:54 -04:00
Mike Bonnet
2a3f78ead0 typo 2007-03-20 18:05:24 -04:00
Mike Bonnet
1ab7d2c898 allow the username component of the client's DN to be configurable 2007-03-20 10:56:52 -04:00
Michael Bonnet
2cb2f3684d enable authentication via SSL client certificates in the web interface 2007-03-16 21:39:02 -04:00
Michael Bonnet
95db5c1f63 enable authentication from the cli via SSL client certificates 2007-03-16 21:39:01 -04:00
Jesse Keating
034de335ad Move web content from /var/www to /usr/share 2007-02-20 09:51:08 -05:00
Jesse Keating
5d7e66a17e Initial code drop 2007-02-14 11:25:01 -05:00