summaryrefslogtreecommitdiffstats
path: root/examples/apache.conf
blob: cc242e84ba617fb41939c47057bda86ce0a180c1 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
Alias /idp/ui /var/www/idp/ipsilon/ui
WSGIScriptAlias /idp /var/www/idp/ipsilon/src/ipsilon.py
WSGIDaemonProcess idp python-path=/var/www/idp/ipsilon/src
home=/var/www/idp/ipsilon/src maximum-requests=2 user=ipsilon group=ipsilon
WSGIProcessGroup idp

<Location /idp/login/krb/negotiate>
  AuthType Kerberos
  AuthName "Kerberos Login"
  KrbMethodNegotiate on
  KrbMethodK5Passwd off
  KrbServiceName HTTP
  KrbAuthRealms IPA.DEV.LAN
  Krb5KeyTab /etc/httpd/conf/http.keytab
  KrbSaveCredentials off
  KrbConstrainedDelegation off
  KrbLocalUserMapping On
  Require valid-user

  ErrorDocument 401 /idp/login/krb/unauthorized
</Location>

<Directory /idp>
    Order allow,deny
    Allow from all
</Directory>