WSGI settings incorrectly makes instance global

The WSGIProcessGroup directive should only apply to the /idp URI.
Without wrapping this directive in the Location element, multiple
Ipsilon instances or an Ipsilon instance installed on a FreeIPA
server will conflict and encounter problems running in the same
httpd process. All wsgi processes will end up redirected to the
last process grup defined in the configuration in this case and
all other instances of wsgi applications will be unreachable.

Resolves: https://fedorahosted.org/ipsilon/ticket/1

Signed-off-by: Nathan Kinder <nkinder@redhat.com>
Reviewed-by: Simo Sorce <simo@redhat.com>

diff --git a/templates/install/idp.conf b/templates/install/idp.conf
index ea4a769..eb5752e 100644 (file)
--- a/templates/install/idp.conf
+++ b/templates/install/idp.conf
@@ -1,7 +1,10 @@
 Alias /${instance}/ui /usr/share/ipsilon/ui
 WSGIScriptAlias /${instance} /usr/sbin/ipsilon
 WSGIDaemonProcess ${instance} user=ipsilon group=ipsilon home=${datadir}
-WSGIProcessGroup ${instance}
+
+<Location /idp>
+    WSGIProcessGroup ${instance}
+</Location>
 
 <Directory /usr/sbin>
     Require all granted