diff options
| author | Fraser Tweedale <ftweedal@redhat.com> | 2017-02-04 16:33:18 +1000 |
|---|---|---|
| committer | Simo Sorce <simo@redhat.com> | 2017-02-08 07:39:47 -0500 |
| commit | eb8ed98b9ba758a0c8db67151c18d1dd943e4289 (patch) | |
| tree | 295bf50a0a86d6146c8e7095791ab0c9063e9223 /README | |
| parent | 3ae63e3a31b3fd0241fcdad0a1dbd0414e225615 (diff) | |
| download | mod_auth_gssapi-eb8ed98b9ba758a0c8db67151c18d1dd943e4289.tar.gz mod_auth_gssapi-eb8ed98b9ba758a0c8db67151c18d1dd943e4289.tar.xz mod_auth_gssapi-eb8ed98b9ba758a0c8db67151c18d1dd943e4289.zip | |
Add option to set alternative ccname env var
In some cases (e.g. if you want to convey the ccname over AJP) the
request environment variable name "KRB5CCNAME" is not appropriate.
Add the GssapiDelegCcacheEnvVar option that allows the env var name
to be changed.
Fixes: https://github.com/modauthgssapi/mod_auth_gssapi/issues/123
Reviewed-by: Simo Sorce <simo@redhat.com>
Closes #124
Closes #123
Diffstat (limited to 'README')
| -rw-r--r-- | README | 14 |
1 files changed, 12 insertions, 2 deletions
@@ -176,8 +176,8 @@ options like keytab location, client_keytab location, ccache location etc. If delegation of credentials is desired credentials can be exported in a private directory accessible by the Apache process. The delegated credentials will be stored in a file named after the client -principal and the subprocess environment variable KRB5CCNAME will be set -to point to that file. +principal and a request environment variable (`KRB5CCNAME` by default) will be +set to point to that file. #### Example GssapiDelegCcacheDir /var/run/httpd/clientcaches @@ -199,6 +199,16 @@ in the contrib directory. #### Example GssapiDelegCcacheUnique On + +### GssapiDelegCcacheEnvVar + +Set the name of the request environment variable that will receive the +credential cache name. If unspecified, defaults to `KRB5CCNAME`. + +#### Example + GssapiDelegCcacheEnvVar AJP_KRB5CCNAME + + ### GssapiUseS4U2Proxy Enables the use of the s4u2Proxy Kerberos extension also known as |