[packages/apache-mod_auth_kerb] - sane module load path - added example config
baggins
baggins at pld-linux.org
Fri May 3 23:25:06 CEST 2013
commit 36671bd3da3986c992122165242ab1e0a088eb14
Author: Jan Rękorajski <baggins at pld-linux.org>
Date: Fri May 3 23:03:24 2013 +0200
- sane module load path
- added example config
apache-mod_auth_kerb.conf | 21 ++++++++++++++++++++-
1 file changed, 20 insertions(+), 1 deletion(-)
---
diff --git a/apache-mod_auth_kerb.conf b/apache-mod_auth_kerb.conf
index 7a3ba39..c8b8f1e 100644
--- a/apache-mod_auth_kerb.conf
+++ b/apache-mod_auth_kerb.conf
@@ -1 +1,20 @@
-LoadModule auth_kerb_module /usr/lib/apache/mod_auth_kerb.so
+LoadModule auth_kerb_module modules/mod_auth_kerb.so
+
+#
+# Sample configuration: Kerberos authentication must only be
+# used over SSL to prevent replay attacks. The keytab file
+# configured must be readable only by the "apache" user, and
+# must contain service keys for "HTTP/www.example.com", where
+# "www.example.com" is the FQDN of this server.
+#
+
+#<Location /private>
+# SSLRequireSSL
+# AuthType Kerberos
+# AuthName "Kerberos Login"
+# KrbMethodNegotiate On
+# KrbMethodK5Passwd Off
+# KrbAuthRealms EXAMPLE.COM
+# Krb5KeyTab /etc/httpd/conf/keytab
+# require valid-user
+#</Location>
================================================================
---- gitweb:
http://git.pld-linux.org/gitweb.cgi/packages/apache-mod_auth_kerb.git/commitdiff/96f58112365d59ceb735780ebf1e0fd9d5bf4e45
More information about the pld-cvs-commit
mailing list