diff options
| author | Rob Crittenden <rcritten@redhat.com> | 2015-04-14 11:49:00 -0400 |
|---|---|---|
| committer | Rob Crittenden <rcritten@redhat.com> | 2015-04-14 13:31:52 -0400 |
| commit | 59056a3d3771e19809f67b1f6b231788aced4b9e (patch) | |
| tree | d085438af642afe06a38e4b6821ca7e3af8a75c6 /doc/design.txt | |
| parent | f73332fb7d55bd5753a8bafc2493172203fcf377 (diff) | |
| download | ipsilon.git-59056a3d3771e19809f67b1f6b231788aced4b9e.tar.gz ipsilon.git-59056a3d3771e19809f67b1f6b231788aced4b9e.tar.xz ipsilon.git-59056a3d3771e19809f67b1f6b231788aced4b9e.zip | |
Use mod_auth_gssapi instead of mod_auth_kerbgssapi
Change configuration on new installs only.
Enable GssapiLocalName so we have access to the local name in
REMOTE_USER and the full principle in GSS_NAME.
Enable GssapiSSLonly even though SSLRequireSSL is also set.
The belt and suspenders principla.
https://fedorahosted.org/ipsilon/ticket/89
Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Diffstat (limited to 'doc/design.txt')
| -rw-r--r-- | doc/design.txt | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/doc/design.txt b/doc/design.txt index 44699c5..08830d2 100644 --- a/doc/design.txt +++ b/doc/design.txt @@ -29,7 +29,7 @@ Architecture Ipsilon is mostly a web service builtin in python on the cherrypy framework. It is normally installed and run in an apache server and some plugins depend -on authentication modules available in apache like mod_auth_kerb. +on authentication modules available in apache like mod_auth_gssapi. Each authentication method is chained to the next in line so that automatic fallback can happen and multiple authentication methods can be employed at |