[Freeipa-users] Re: Transporting Identity Metadata from Apache proxy to backend web application

Hi Rob, Thanks, that article helped. It's working now 1. Add to /etc/sssd/sssd.conf [domain/example.com] ldap_user_extra_attrs=email:mail, sn:sn, givenname:givenname, preferredLanguage:preferredLanguage 2. systemctl restart sssd.service 3. sudo sss_cache -E Best regards, Bart __

[Freeipa-users] Re: Transporting Identity Metadata from Apache proxy to backend web application

Hi Rob, Thanks for the advice. I changed the LDAP attributes in the ifp config file, no luck. The preferredLanguage is default in the IPA LDAP schema. Did not extend the schema. Do you know where to look to debug this issue? Best regards, Bart ___ F

[Freeipa-users] Transporting Identity Metadata from Apache proxy to backend web application

Hi, Using the Kerberos and the Apache plugins mod_auth_gssapi and mod_lookup_identity the following flow is working: 1. User is authenticated using kinit 2. Apache authenticates the user 3. The proxy transports the meta data of the user (SSSD provides the user info) 4. The meta data is added to