summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJan Pazdziora <jpazdziora@redhat.com>2014-01-08 03:24:37 -0500
committerJan Pazdziora <jpazdziora@redhat.com>2016-06-17 15:06:47 +0200
commit2b83027965278e06f8936a1dc1ab2fc1883dda29 (patch)
tree70ac07f50256bb92d3012bcb8531680849f55bae
parent59c3aaa95d68771f19e26e1b5f81b13f8f1e41ca (diff)
downloadCGI-sessions-mod_authnz_pam-pam-account-mod_auth_gssapi.tar.gz
CGI-sessions-mod_authnz_pam-pam-account-mod_auth_gssapi.tar.xz
CGI-sessions-mod_authnz_pam-pam-account-mod_auth_gssapi.zip
Run Kerberos authentication through PAM access check for service wikiapp.mod_authnz_pam-pam-account-mod_auth_gssapi
(cherry picked from commit 34abb53a91f5eec644c9367004a634b5b904b734)
-rw-r--r--auth_kerb.conf3
1 files changed, 2 insertions, 1 deletions
diff --git a/auth_kerb.conf b/auth_kerb.conf
index e76cb39..ea3eb6b 100644
--- a/auth_kerb.conf
+++ b/auth_kerb.conf
@@ -1,11 +1,12 @@
LoadModule auth_gssapi_module modules/mod_auth_gssapi.so
+LoadModule authnz_pam_module modules/mod_authnz_pam.so
<Location /application/login>
AuthType GSSAPI
AuthName "Kerberos Login"
GssapiCredStore keytab:/etc/http.keytab
- require valid-user
+ require pam-account wikiapp
ErrorDocument 401 '<html><meta http-equiv="refresh" content="0; URL=/application/login2"><body>Kerberos authentication did not pass.</body></html>'
</Location>