install/share/gssproxy.conf.template


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17

#Installed and maintained by ipa update tools, please do not modify
[service/ipa-httpd]
  mechs = krb5
  cred_store = keytab:$HTTP_KEYTAB
  cred_store = client_keytab:$HTTP_KEYTAB
  allow_protocol_transition = true
  allow_constrained_delegation = true
  cred_usage = both
  euid = $HTTPD_USER

[service/ipa-api]
  mechs = krb5
  cred_store = keytab:$HTTP_KEYTAB
  cred_store = client_keytab:$HTTP_KEYTAB
  allow_constrained_delegation = true
  cred_usage = initiate
  euid = $IPAAPI_USER