summaryrefslogtreecommitdiffstats
path: root/README
diff options
context:
space:
mode:
authorIsaac Boukris <iboukris@gmail.com>2016-02-17 01:21:25 +0200
committerSimo Sorce <simo@redhat.com>2016-02-17 20:44:36 -0500
commit5571d79a78a1360f2a56b22c6bf59640cf2c88e8 (patch)
tree10da96540777d9c40ee3b1c9c5c564083ab774ad /README
parentf9cc36700c95a88ff7d7489167094556ac0e75cc (diff)
downloadmod_auth_gssapi-5571d79a78a1360f2a56b22c6bf59640cf2c88e8.tar.gz
mod_auth_gssapi-5571d79a78a1360f2a56b22c6bf59640cf2c88e8.tar.xz
mod_auth_gssapi-5571d79a78a1360f2a56b22c6bf59640cf2c88e8.zip
Cleanup s4u2proxy in mag_auth_basic
It doesn't have any effect since we set GSS_C_DELEG_FLAG when we initiate client credentials so we always get delegated TGT regardless of constrained delegation. This commit is not intended to change the current behaviour. See #70 Reviewed-by: Simo Sorce <simo@redhat.com> Closes #70 Closes #72
Diffstat (limited to 'README')
-rw-r--r--README3
1 files changed, 3 insertions, 0 deletions
diff --git a/README b/README
index 65ce17b..b4eca28 100644
--- a/README
+++ b/README
@@ -182,6 +182,9 @@ This options requires GssapiDelegCcacheDir to be set. The ccache will be
populated with the user's provided ticket which is later used as evidence
ticket by the application.
+**Note:** This flag has no effect when Basic-Auth is used since user's
+credentials are delegated anyway when GssapiDelegCcacheDir is set.
+
#### Example
GssapiUseS4U2Proxy On
GssapiCredStore keytab:/etc/httpd.keytab