{"push_id":1457593952,"size":2,"distinct_size":2,"ref":"refs/heads/webui_isolate","head":"89587709279d0a85369f08b0e5c50b289cb44606","before":"6a0e382a4c5468a950b468606b6915b1bb4aa0a5","commits":[{"sha":"163a85e5c1e849821c0f972eb02d81012e57031a","author":{"name":"Simo Sorce","email":"7617cea8f16c63a141db266ef235d13133598ae8@redhat.com"},"message":"Separate RA cert store from the HTTP cert store\n\nThis is in preparation for separating out the user under which the\nipa api framework runs as.\n\nThis commit also removes certs.NSS_DIR to avoid confusion and replaces\nit where appropriate with the correct NSS DB directory, either the old\nHTTPD_ALIAS_DIR ot the RA DB IPA_RADB_DIR. In some cases its use is\nremoved altogether as it was simply not necessary.\n\nSigned-off-by: Simo Sorce <simo@redhat.com>","distinct":true,"url":"https://api.github.com/repos/simo5/freeipa/commits/163a85e5c1e849821c0f972eb02d81012e57031a"},{"sha":"89587709279d0a85369f08b0e5c50b289cb44606","author":{"name":"Simo Sorce","email":"7617cea8f16c63a141db266ef235d13133598ae8@redhat.com"},"message":"Add a new user to run the framework code\n\nAdd the apache user the ipawebui group.\nMake the ccaches directory owned by the ipawebui group and make\nmod_auth_gssapi write the ccache files as r/w by the apache user and\nthe ipawebui group.\nFix tmpfiles creation ownership and permissions to allow the user to\naccess ccaches files.\nThe webui framework now works as a separate user than apache, so the certs\nused to access the dogtag instance need to be usable by this new user as well.\nBoth apache and the webui user are in the ipawebui group, so use that.\n\nhttps://fedorahosted.org/freeipa/ticket/5959\n\nSigned-off-by: Simo Sorce <simo@redhat.com>","distinct":true,"url":"https://api.github.com/repos/simo5/freeipa/commits/89587709279d0a85369f08b0e5c50b289cb44606"}]}
{"actor":{"display_login":"simo5"}}