summaryrefslogtreecommitdiffstats
path: root/examples/apache.conf
blob: 13479167dbab00e50d53b6a7bea53a5f1569ce0d (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
Alias /idp/ui /var/www/idp/ipsilon/ui
WSGIScriptAlias /idp /var/www/idp/ipsilon/ipsilon/idpserver.py
WSGIDaemonProcess idp python-path=/var/www/idp/ipsilon/ipsilon home=/var/www/idp/ipsilon/ipsilon maximum-requests=2 user=ipsilon group=ipsilon
WSGIProcessGroup idp

<Location /idp/login/krb/negotiate>
  AuthType Kerberos
  AuthName "Kerberos Login"
  KrbMethodNegotiate on
  KrbMethodK5Passwd off
  KrbServiceName HTTP
  KrbAuthRealms IPA.DEV.LAN
  Krb5KeyTab /etc/httpd/conf/http.keytab
  KrbSaveCredentials off
  KrbConstrainedDelegation off
  KrbLocalUserMapping On
  Require valid-user

  ErrorDocument 401 /idp/login/krb/unauthorized
</Location>

<Directory /idp>
    Order allow,deny
    Allow from all
</Directory>