diff options
| author | Rob Crittenden <rcritten@redhat.com> | 2015-04-28 15:16:54 -0400 |
|---|---|---|
| committer | Rob Crittenden <rcritten@redhat.com> | 2015-04-28 15:43:08 -0400 |
| commit | 31bd0555be187e9a14d392fa6a81e4c0c342ac5d (patch) | |
| tree | 02489a3332ef4891c7d4e2c39b2e4b9dbd1e6540 /examples | |
| parent | 666cdec13aefea5230dfdbfcf5402159f4d59469 (diff) | |
| download | ipsilon.git-31bd0555be187e9a14d392fa6a81e4c0c342ac5d.tar.gz ipsilon.git-31bd0555be187e9a14d392fa6a81e4c0c342ac5d.tar.xz ipsilon.git-31bd0555be187e9a14d392fa6a81e4c0c342ac5d.zip | |
Change references to authkrb plugin to authgssapirename_krb
With the switch to mod_auth_gssapi we aren't limited to only
negotiated Kerberos so name the plugin to reflect this.
https://fedorahosted.org/ipsilon/ticket/114
Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Diffstat (limited to 'examples')
| -rw-r--r-- | examples/apache.conf | 20 |
1 files changed, 8 insertions, 12 deletions
diff --git a/examples/apache.conf b/examples/apache.conf index 19ebb0d..cacbf70 100644 --- a/examples/apache.conf +++ b/examples/apache.conf @@ -3,20 +3,16 @@ WSGIScriptAlias /idp /usr/libexec/ipsilon.py WSGIDaemonProcess idp maximum-requests=2 user=ipsilon group=ipsilon WSGIProcessGroup idp -<Location /idp/login/krb/negotiate> - AuthType Kerberos - AuthName "Kerberos Login" - KrbMethodNegotiate on - KrbMethodK5Passwd off - KrbServiceName HTTP - KrbAuthRealms IPA.DEV.LAN - Krb5KeyTab /etc/httpd/conf/http.keytab - KrbSaveCredentials off - KrbConstrainedDelegation off - KrbLocalUserMapping On +<Location /idp/login/gssapi/negotiate> + AuthType GSSAPI + AuthName "GSSAPI Single Sign On Login" + GssapiCredStore /etc/httpd/conf/http.keytab + GssapiSSLonly On + GssapiLocalName on Require valid-user - ErrorDocument 401 /idp/login/krb/unauthorized + ErrorDocument 401 /idp/login/gssapi/unauthorized + ErrorDocument 500 /idp/login/gssapi/failed </Location> <Directory /usr/libexec> |