Ori.livneh has uploaded a new change for review.
https://gerrit.wikimedia.org/r/243367
Change subject: graphite-web: enable Django's REMOTE_USER auth middleware
......................................................................
graphite-web: enable Django's REMOTE_USER auth middleware
With I36d9dd397, we told Apache's mod_authnz_ldap to set REMOTE_USER to the
LDAP user's CN. Now we can configure graphite-web's Django app to use that to
authenticate users.
Change-Id: I5ad49ebe7238b9eb507fc8fa437386ff51091e98
---
M modules/graphite/templates/local_settings.py.erb
1 file changed, 7 insertions(+), 2 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/67/243367/1
diff --git a/modules/graphite/templates/local_settings.py.erb
b/modules/graphite/templates/local_settings.py.erb
index b18daea..e75b3cf 100644
--- a/modules/graphite/templates/local_settings.py.erb
+++ b/modules/graphite/templates/local_settings.py.erb
@@ -58,8 +58,13 @@
<%- end -%>
-## CORS
+## CORS and REMOTE_USER-based authentication
from graphite.app_settings import *
-MIDDLEWARE_CLASSES += ('cors.CorsMiddleware',)
+
CORS_ORIGINS = <%= Array(@cors_origins).inspect %>
+
+MIDDLEWARE_CLASSES += (
+ 'cors.CorsMiddleware',
+ 'django.contrib.auth.middleware.RemoteUserMiddleware',
+)
--
To view, visit https://gerrit.wikimedia.org/r/243367
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I5ad49ebe7238b9eb507fc8fa437386ff51091e98
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Ori.livneh <o...@wikimedia.org>
_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
