Issue #9982: Disable TRACE method - freeipa

Our httpd config allows the TRACE method, which is deemed as insecure, we can disable the method all together, it's not being used for anything.

TraceEnable Off

This can be tested as

curl https://ipa.demo.test/ipa/ui -X TRACE

The correct and secure response is 405, as defined in https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Methods/TRACE

Metadata Update from @dhanina:
- Custom field rhbz adjusted to https://redhat.atlassian.net/browse/RHEL-59772

Apr 30, 2026

Assignee

dhanina

Tags

None

Blocking

None

Depending on

None

Priority

None

on_review

None

Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.