diff options
| author | Robbie Harwood (frozencemetery) <rharwood@redhat.com> | 2015-08-27 10:13:39 -0400 |
|---|---|---|
| committer | Simo Sorce <simo@redhat.com> | 2015-09-04 15:18:21 -0400 |
| commit | e4a9474fa2cb246e0bdc0584e923aa1bb13051e6 (patch) | |
| tree | a91df388fd2b8cee086ecca616e832abc9426dfc /proxy/examples | |
| parent | 75049219ea44cfe2c3ede1b9958bed9926b57818 (diff) | |
| download | gss-proxy-e4a9474fa2cb246e0bdc0584e923aa1bb13051e6.tar.gz gss-proxy-e4a9474fa2cb246e0bdc0584e923aa1bb13051e6.tar.xz gss-proxy-e4a9474fa2cb246e0bdc0584e923aa1bb13051e6.zip | |
Add HTTP service and move NFS into its own conf file
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
Reviewed-by: Simo Sorce <simo@redhat.com>
Diffstat (limited to 'proxy/examples')
| -rw-r--r-- | proxy/examples/24-nfs-server.conf.in | 7 | ||||
| -rw-r--r-- | proxy/examples/80-httpd.conf.in | 5 | ||||
| -rw-r--r-- | proxy/examples/99-nfs-client.conf.in | 9 | ||||
| -rw-r--r-- | proxy/examples/gssproxy.conf.in | 18 |
4 files changed, 21 insertions, 18 deletions
diff --git a/proxy/examples/24-nfs-server.conf.in b/proxy/examples/24-nfs-server.conf.in new file mode 100644 index 0000000..5011e92 --- /dev/null +++ b/proxy/examples/24-nfs-server.conf.in @@ -0,0 +1,7 @@ +[service/nfs-server] + mechs = krb5 + socket = /run/gssproxy.sock + cred_store = keytab:/etc/krb5.keytab + trusted = yes + kernel_nfsd = yes + euid = 0 diff --git a/proxy/examples/80-httpd.conf.in b/proxy/examples/80-httpd.conf.in new file mode 100644 index 0000000..1dbf9ef --- /dev/null +++ b/proxy/examples/80-httpd.conf.in @@ -0,0 +1,5 @@ +[service/HTTP] + mechs = krb5 + cred_store = keytab:/etc/gssproxy/http.keytab + cred_store = ccache:/var/lib/gssproxy/clients/krb5cc_%U + euid = apache diff --git a/proxy/examples/99-nfs-client.conf.in b/proxy/examples/99-nfs-client.conf.in new file mode 100644 index 0000000..c0985d9 --- /dev/null +++ b/proxy/examples/99-nfs-client.conf.in @@ -0,0 +1,9 @@ +[service/nfs-client] + mechs = krb5 + cred_store = keytab:/etc/krb5.keytab + cred_store = ccache:FILE:@gpclidir@/krb5cc_%U + cred_store = client_keytab:@gpclidir@/%U.keytab + cred_usage = initiate + allow_any_uid = yes + trusted = yes + euid = 0 diff --git a/proxy/examples/gssproxy.conf.in b/proxy/examples/gssproxy.conf.in index 321a4e7..7f1eddd 100644 --- a/proxy/examples/gssproxy.conf.in +++ b/proxy/examples/gssproxy.conf.in @@ -1,19 +1 @@ [gssproxy] - -[service/nfs-server] - mechs = krb5 - socket = /run/gssproxy.sock - cred_store = keytab:/etc/krb5.keytab - trusted = yes - kernel_nfsd = yes - euid = 0 - -[service/nfs-client] - mechs = krb5 - cred_store = keytab:/etc/krb5.keytab - cred_store = ccache:FILE:@gpclidir@/krb5cc_%U - cred_store = client_keytab:@gpclidir@/%U.keytab - cred_usage = initiate - allow_any_uid = yes - trusted = yes - euid = 0 |