summaryrefslogtreecommitdiffstats
path: root/src
diff options
context:
space:
mode:
Diffstat (limited to 'src')
-rw-r--r--src/mod_auth_gssapi.c13
-rw-r--r--src/mod_auth_gssapi.h1
2 files changed, 14 insertions, 0 deletions
diff --git a/src/mod_auth_gssapi.c b/src/mod_auth_gssapi.c
index 48300e9..0ca9a27 100644
--- a/src/mod_auth_gssapi.c
+++ b/src/mod_auth_gssapi.c
@@ -572,6 +572,10 @@ static int mag_auth(request_rec *req)
mc->auth_type = auth_type;
}
+ if (cfg->send_persist)
+ apr_table_set(req->headers_out, "Persistent-Auth",
+ cfg->gss_conn_ctx ? "true" : "false");
+
ret = OK;
done:
@@ -650,6 +654,13 @@ static const char *mag_conn_ctx(cmd_parms *parms, void *mconfig, int on)
return NULL;
}
+static const char *mag_send_persist(cmd_parms *parms, void *mconfig, int on)
+{
+ struct mag_config *cfg = (struct mag_config *)mconfig;
+ cfg->send_persist = on ? true : false;
+ return NULL;
+}
+
static const char *mag_use_sess(cmd_parms *parms, void *mconfig, int on)
{
struct mag_config *cfg = (struct mag_config *)mconfig;
@@ -803,6 +814,8 @@ static const command_rec mag_commands[] = {
"Translate principals to local names"),
AP_INIT_FLAG("GssapiConnectionBound", mag_conn_ctx, NULL, OR_AUTHCFG,
"Authentication is bound to the TCP connection"),
+ AP_INIT_FLAG("GssapiSignalPersistentAuth", mag_send_persist, NULL, OR_AUTHCFG,
+ "Send Persitent-Auth header according to connection bound"),
AP_INIT_FLAG("GssapiUseSessions", mag_use_sess, NULL, OR_AUTHCFG,
"Authentication uses mod_sessions to hold status"),
AP_INIT_RAW_ARGS("GssapiSessionKey", mag_sess_key, NULL, OR_AUTHCFG,
diff --git a/src/mod_auth_gssapi.h b/src/mod_auth_gssapi.h
index 4cf7d39..b12b0e9 100644
--- a/src/mod_auth_gssapi.h
+++ b/src/mod_auth_gssapi.h
@@ -39,6 +39,7 @@ struct mag_config {
bool ssl_only;
bool map_to_local;
bool gss_conn_ctx;
+ bool send_persist;
bool use_sessions;
bool use_s4u2proxy;
char *deleg_ccache_dir;