diff options
| author | Simo Sorce <simo@redhat.com> | 2014-03-09 16:24:34 -0400 |
|---|---|---|
| committer | Simo Sorce <simo@redhat.com> | 2014-03-09 17:33:21 -0400 |
| commit | 7454bf67ffe23a63fd530895b58f048f207b1e4f (patch) | |
| tree | 2f02d2123a6d5b864df8639597b89b35e84054fd /example | |
| parent | 76a682eda05ce9f2705ccf17503fb3870b6b49ae (diff) | |
| download | mod_auth_gssapi-7454bf67ffe23a63fd530895b58f048f207b1e4f.tar.gz mod_auth_gssapi-7454bf67ffe23a63fd530895b58f048f207b1e4f.tar.xz mod_auth_gssapi-7454bf67ffe23a63fd530895b58f048f207b1e4f.zip | |
Allow context to be attached to the connection
This means the authentication is not repeated for every request but
is retained for the life of the connection.
This may be a security issue if a frontend proxy shares connections
between multiple users so must be used with care.
RFC 4559 warns that clients should not try SPNEGO if such a proxy
is present. Unfortuntely the RFC assumes a non-standard method to
determine if a proxy maintain separate connections.
Diffstat (limited to 'example')
0 files changed, 0 insertions, 0 deletions