summaryrefslogtreecommitdiffstats
path: root/src/mod_auth_gssapi.h
diff options
context:
space:
mode:
authorSimo Sorce <simo@redhat.com>2016-11-02 06:34:11 -0400
committerSimo Sorce <simo@redhat.com>2016-11-30 05:39:33 -0500
commitf8f308f00b7f2695ae811d64038febc59dc688d5 (patch)
tree45637d245ab69574518a697759562161b9592479 /src/mod_auth_gssapi.h
parent912738edbf248c9d9c2960cd4ff1daaa855e6c7e (diff)
downloadmod_auth_gssapi-f8f308f00b7f2695ae811d64038febc59dc688d5.tar.gz
mod_auth_gssapi-f8f308f00b7f2695ae811d64038febc59dc688d5.tar.xz
mod_auth_gssapi-f8f308f00b7f2695ae811d64038febc59dc688d5.zip
Add option to set custom permissions on ccache
This allows apache to set permission so that another user in the default group can access the ccache. Useful when apache passes the request to a process running under a different user or group id number. Signed-off-by: Simo Sorce <simo@redhat.com> Reviewed-by: Robbie Harwood <rharwood@redhat.com>
Diffstat (limited to 'src/mod_auth_gssapi.h')
-rw-r--r--src/mod_auth_gssapi.h7
1 files changed, 7 insertions, 0 deletions
diff --git a/src/mod_auth_gssapi.h b/src/mod_auth_gssapi.h
index 6ff9fbd..1a5ff8b 100644
--- a/src/mod_auth_gssapi.h
+++ b/src/mod_auth_gssapi.h
@@ -36,6 +36,10 @@
# include <gssapi/gssapi_ntlmssp.h>
#endif
+#include <ctype.h>
+#include <pwd.h>
+#include <grp.h>
+
#include "crypto.h"
#include "sessions.h"
#include "environ.h"
@@ -69,6 +73,9 @@ struct mag_config {
#ifdef HAVE_CRED_STORE
bool use_s4u2proxy;
char *deleg_ccache_dir;
+ mode_t deleg_ccache_mode;
+ uid_t deleg_ccache_uid;
+ gid_t deleg_ccache_gid;
gss_key_value_set_desc *cred_store;
bool deleg_ccache_unique;;
bool s4u2self;