From db999f985dc4357e32db6bcc893aa354d2595c98 Mon Sep 17 00:00:00 2001 From: Simo Sorce Date: Fri, 19 Jun 2015 17:11:42 -0400 Subject: Add GssapiBasicAuthMech option This option allows to set a different list of mechanisms to use with Basic Auth (Basic Auth must be explicitly enabled) than the list of mechs that are allowed with Negotiate or Raw GSSAPI Client authentication. Signed-off-by: Simo Sorce --- README | 13 +++++++++++++ 1 file changed, 13 insertions(+) (limited to 'README') diff --git a/README b/README index 87b1436..93a90b8 100644 --- a/README +++ b/README @@ -216,3 +216,16 @@ are allowed. The recognized mechanism names are: krb5, iakerb, ntlmssp Example: GssapiAllowedMech krb5 GssapiAllowedMech ntlmssp + + +### GssapiBasicAuthMech + +List of mechanisms against which Basic Auth is attempted. This is useful to +restrict the mechanisms that can be used to attaempt password auth. +By default no mechanism is set, this means all locally available mechanisms +are allowed, unless GssapiAllowedMech is set, in which case those are used. +GssapiBasicAuthMech always takes precendence over GssapiAllowedMech. +The recognized mechanism names are: krb5, iakerb, ntlmssp + +Example: + GssapiBasicAuthMech krb5 -- cgit