I've recently been setting up a koji environment. I've been relying heavily
on the docs http://fedoraproject.org/wiki/Koji/ServerHowTo
. The docs have
been a great help.
However, I ran into a small issue when modifying the ProxyDNs option in
DNUsernameComponent = CN
ProxyDNs = "/C=US/ST=Massachusetts/O=Example Org/OU=Example
I had problems with the server responding with: "(user) is not authorized to
login other users". I did change the value to my cert's settings.
Turns out that if I removed the quotes then everything is happy.
I'm not sure if it is intended to allow a quoted string for this option or
not, considering the current behaviour is to split multiple ProxyDNs' via |
Attached is a patch that will help avoid users seeing the above message when
authenticating with SSL. Of course, removing the quotes from your config
will correct the issue; the patch merely tries to avoid the problem by
removing quotes from the string when the client_dn is sought in the *if
<string> in <list>* statement.