From df835631dd69776dd803ee941258d8e3710d60a1 Mon Sep 17 00:00:00 2001
From: Mike McLean <mikem@redhat.com>
Date: Sep 15 2025 20:55:25 +0000
Subject: disable url sessions by default


Fixes https://pagure.io/koji/issue/4420

---

diff --git a/kojihub/kojixmlrpc.py b/kojihub/kojixmlrpc.py
index f64a340..9a37f61 100644
--- a/kojihub/kojixmlrpc.py
+++ b/kojihub/kojixmlrpc.py
@@ -441,8 +441,7 @@ config_map = [
     ['ProxyPrincipals', 'string', ''],
     ['HostPrincipalFormat', 'string', None],
     ['AllowedKrbRealms', 'string', '*'],
-    # TODO:  this option should be turned True in 1.34
-    ['DisableURLSessions', 'boolean', False],
+    ['DisableURLSessions', 'boolean', True],
 
     ['DNUsernameComponent', 'string', 'CN'],
     ['ProxyDNs', 'string', ''],