summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorSimo Sorce <simo@redhat.com>2014-01-22 11:40:57 -0500
committerSimo Sorce <simo@redhat.com>2014-01-24 17:32:21 -0500
commit1e3d8e4cc15dcbb0de5898e202089670f1659af3 (patch)
tree2cd9b04152ae06fdc5c9f88bf54e03379c944ef7
parentd0a1541e095b9cee6468eeea07a950264753dd39 (diff)
downloadipsilon-1e3d8e4cc15dcbb0de5898e202089670f1659af3.zip
ipsilon-1e3d8e4cc15dcbb0de5898e202089670f1659af3.tar.gz
ipsilon-1e3d8e4cc15dcbb0de5898e202089670f1659af3.tar.xz
Add sample apache configuration
Signed-off-by: Simo Sorce <simo@redhat.com>
-rw-r--r--examples/apache.conf26
1 files changed, 26 insertions, 0 deletions
diff --git a/examples/apache.conf b/examples/apache.conf
new file mode 100644
index 0000000..1347916
--- /dev/null
+++ b/examples/apache.conf
@@ -0,0 +1,26 @@
+Alias /idp/ui /var/www/idp/ipsilon/ui
+WSGIScriptAlias /idp /var/www/idp/ipsilon/ipsilon/idpserver.py
+WSGIDaemonProcess idp python-path=/var/www/idp/ipsilon/ipsilon home=/var/www/idp/ipsilon/ipsilon maximum-requests=2 user=ipsilon group=ipsilon
+WSGIProcessGroup idp
+
+<Location /idp/login/krb/negotiate>
+ AuthType Kerberos
+ AuthName "Kerberos Login"
+ KrbMethodNegotiate on
+ KrbMethodK5Passwd off
+ KrbServiceName HTTP
+ KrbAuthRealms IPA.DEV.LAN
+ Krb5KeyTab /etc/httpd/conf/http.keytab
+ KrbSaveCredentials off
+ KrbConstrainedDelegation off
+ KrbLocalUserMapping On
+ Require valid-user
+
+ ErrorDocument 401 /idp/login/krb/unauthorized
+</Location>
+
+<Directory /idp>
+ Order allow,deny
+ Allow from all
+</Directory>
+