summaryrefslogtreecommitdiffstats
path: root/README
diff options
context:
space:
mode:
authorSimo Sorce <simo@redhat.com>2015-05-25 16:46:23 +0200
committerSimo Sorce <simo@redhat.com>2015-06-03 15:20:16 -0400
commita2c2a02edaadda09408708cf9d7b57aa59ae4b39 (patch)
tree160e3121e8050f80f45c0ab5922e3f1fc6053b9b /README
parent4b68f81eb41a5934a952e2326c1226b5ef583269 (diff)
downloadmod_auth_gssapi-a2c2a02edaadda09408708cf9d7b57aa59ae4b39.tar.gz
mod_auth_gssapi-a2c2a02edaadda09408708cf9d7b57aa59ae4b39.tar.xz
mod_auth_gssapi-a2c2a02edaadda09408708cf9d7b57aa59ae4b39.zip
Add GssapiAllowedMech option
This option allows the admin to list the mechanisms that can be used for authentication. An empty list allows any locally supported mechanisms.
Diffstat (limited to 'README')
-rw-r--r--README12
1 files changed, 12 insertions, 0 deletions
diff --git a/README b/README
index e8d3031..87b1436 100644
--- a/README
+++ b/README
@@ -204,3 +204,15 @@ Example:
GssapiCredStore keytab:/etc/httpd/http.keytab
Require valid-user
</Location>
+
+
+### GssapiAllowedMech
+
+List of allowed mechanisms. This is useful to restrict the mechanism that
+can be used when credentials for multiple mechanisms are available.
+By default no mechanism is set, this means all locally available mechanisms
+are allowed. The recognized mechanism names are: krb5, iakerb, ntlmssp
+
+Example:
+ GssapiAllowedMech krb5
+ GssapiAllowedMech ntlmssp