1 |
jpp |
1.1 |
diff -Nur --no-dereference smeserver-phpki-ng-0.3.old/root/etc/e-smith/templates/etc/httpd/pki-conf/httpd.conf/20Modules smeserver-phpki-ng-0.3/root/etc/e-smith/templates/etc/httpd/pki-conf/httpd.conf/20Modules |
2 |
|
|
--- smeserver-phpki-ng-0.3.old/root/etc/e-smith/templates/etc/httpd/pki-conf/httpd.conf/20Modules 2022-11-20 20:15:47.931000000 -0500 |
3 |
|
|
+++ smeserver-phpki-ng-0.3/root/etc/e-smith/templates/etc/httpd/pki-conf/httpd.conf/20Modules 2022-11-20 20:16:58.727000000 -0500 |
4 |
|
|
@@ -49,6 +49,7 @@ |
5 |
|
|
authn_core |
6 |
|
|
authz_core |
7 |
|
|
authz_user |
8 |
|
|
+ authz_host |
9 |
|
|
proxy_ajp |
10 |
|
|
proxy_connect |
11 |
|
|
proxy_express |
12 |
|
|
diff -Nur --no-dereference smeserver-phpki-ng-0.3.old/root/etc/e-smith/templates/etc/httpd/pki-conf/httpd.conf/90phpki smeserver-phpki-ng-0.3/root/etc/e-smith/templates/etc/httpd/pki-conf/httpd.conf/90phpki |
13 |
|
|
--- smeserver-phpki-ng-0.3.old/root/etc/e-smith/templates/etc/httpd/pki-conf/httpd.conf/90phpki 2022-11-20 20:15:47.931000000 -0500 |
14 |
|
|
+++ smeserver-phpki-ng-0.3/root/etc/e-smith/templates/etc/httpd/pki-conf/httpd.conf/90phpki 2022-11-20 20:19:00.398000000 -0500 |
15 |
|
|
@@ -26,16 +26,21 @@ |
16 |
|
|
AuthName "PHPKI Admin" |
17 |
|
|
AuthType Basic |
18 |
|
|
TKTAuthLoginURL /server-common/cgi-bin/login |
19 |
|
|
- require user admin {getUsersList("phpki");} |
20 |
|
|
+ <RequireAll> |
21 |
|
|
+ Require user admin {getUsersList("phpki");} |
22 |
|
|
+ Require ip 127.0.0.1 |
23 |
|
|
+ </RequireAll> |
24 |
|
|
+ |
25 |
|
|
{ |
26 |
|
|
my $ManagerTimeout = ${'httpd-admin'}{ManagerTimeout} || "30m"; |
27 |
|
|
$OUT = " TKTAuthTimeout $ManagerTimeout\n"; |
28 |
|
|
my $Cookie = ${'httpd-admin'}{Cookie} || "disabled"; |
29 |
|
|
- $OUT .= " TKTAuthCookieExpires $ManagerTimeout\n" if "$Cookie" eq "enabled"; |
30 |
|
|
+ $OUT .= " TKTAuthCookieExpires $ManagerTimeout\n" if "$Cookie" eq "enabled"; |
31 |
|
|
my $ManagerTimeoutReset = ${'httpd-admin'}{ManagerTimeoutReset} || "0.66"; |
32 |
|
|
- $OUT .= " TKTAuthTimeoutRefresh $ManagerTimeoutReset\n"; |
33 |
|
|
+ $OUT .= " TKTAuthTimeoutRefresh $ManagerTimeoutReset\n"; |
34 |
|
|
} |
35 |
|
|
- Satisfy all |
36 |
|
|
+ Require ip 127.0.0.1 |
37 |
|
|
+ </RequireAll> |
38 |
|
|
</Location> |
39 |
|
|
|
40 |
|
|
# Disable access to /admin, which is used to configure user/password |