diff options
| author | Rob Crittenden <rcritten@redhat.com> | 2015-04-28 15:16:54 -0400 |
|---|---|---|
| committer | Rob Crittenden <rcritten@redhat.com> | 2015-04-28 17:30:07 -0400 |
| commit | 68b9e1d3138784c3793f0a04c411f14168748692 (patch) | |
| tree | 3dee03d42c9f7234b09b272ca5a1865ba0b7529c /examples | |
| parent | 32863be5e39b0d031fafebe7391180d29967fa50 (diff) | |
| download | ipsilon-68b9e1d3138784c3793f0a04c411f14168748692.tar.gz ipsilon-68b9e1d3138784c3793f0a04c411f14168748692.tar.xz ipsilon-68b9e1d3138784c3793f0a04c411f14168748692.zip | |
Change references to authkrb plugin to authgssapi
With the switch to mod_auth_gssapi we aren't limited to only
negotiated Kerberos so name the plugin to reflect this.
https://fedorahosted.org/ipsilon/ticket/114
Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Diffstat (limited to 'examples')
| -rw-r--r-- | examples/apache.conf | 20 |
1 files changed, 8 insertions, 12 deletions
diff --git a/examples/apache.conf b/examples/apache.conf index 19ebb0d..cacbf70 100644 --- a/examples/apache.conf +++ b/examples/apache.conf @@ -3,20 +3,16 @@ WSGIScriptAlias /idp /usr/libexec/ipsilon.py WSGIDaemonProcess idp maximum-requests=2 user=ipsilon group=ipsilon WSGIProcessGroup idp -<Location /idp/login/krb/negotiate> - AuthType Kerberos - AuthName "Kerberos Login" - KrbMethodNegotiate on - KrbMethodK5Passwd off - KrbServiceName HTTP - KrbAuthRealms IPA.DEV.LAN - Krb5KeyTab /etc/httpd/conf/http.keytab - KrbSaveCredentials off - KrbConstrainedDelegation off - KrbLocalUserMapping On +<Location /idp/login/gssapi/negotiate> + AuthType GSSAPI + AuthName "GSSAPI Single Sign On Login" + GssapiCredStore /etc/httpd/conf/http.keytab + GssapiSSLonly On + GssapiLocalName on Require valid-user - ErrorDocument 401 /idp/login/krb/unauthorized + ErrorDocument 401 /idp/login/gssapi/unauthorized + ErrorDocument 500 /idp/login/gssapi/failed </Location> <Directory /usr/libexec> |