summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJan Pazdziora <jpazdziora@redhat.com>2014-01-08 03:24:37 -0500
committerJan Pazdziora <jpazdziora@redhat.com>2014-01-08 03:24:37 -0500
commit34abb53a91f5eec644c9367004a634b5b904b734 (patch)
treecb0abe0fb8a6ce157fbe498c2983d2d9f33bcb18
parent0a30a04784947c37dd9239fdc49b477e40be31d8 (diff)
downloadCGI-sessions-mod_authnz_pam-pam-account.zip
CGI-sessions-mod_authnz_pam-pam-account.tar.gz
CGI-sessions-mod_authnz_pam-pam-account.tar.xz
Run Kerberos authentication through PAM access check for service wikiapp.mod_authnz_pam-pam-account
-rw-r--r--auth_kerb.conf3
1 files changed, 2 insertions, 1 deletions
diff --git a/auth_kerb.conf b/auth_kerb.conf
index 70b65a6..de82528 100644
--- a/auth_kerb.conf
+++ b/auth_kerb.conf
@@ -1,5 +1,6 @@
LoadModule auth_kerb_module modules/mod_auth_kerb.so
+LoadModule authnz_pam_module modules/mod_authnz_pam.so
<Location /application/login>
AuthType Kerberos
@@ -8,7 +9,7 @@ LoadModule auth_kerb_module modules/mod_auth_kerb.so
KrbMethodK5Passwd Off
KrbAuthRealms EXAMPLE.COM
Krb5KeyTab /etc/http.keytab
- require valid-user
+ require pam-account wikiapp
ErrorDocument 401 '<html><meta http-equiv="refresh" content="0; URL=/application/login2"><body>Kerberos authentication did not pass.</body></html>'
</Location>