summaryrefslogtreecommitdiff
path: root/network/mod_auth_kerb/mod_auth_kerb.conf
diff options
context:
space:
mode:
Diffstat (limited to 'network/mod_auth_kerb/mod_auth_kerb.conf')
-rw-r--r--network/mod_auth_kerb/mod_auth_kerb.conf27
1 files changed, 27 insertions, 0 deletions
diff --git a/network/mod_auth_kerb/mod_auth_kerb.conf b/network/mod_auth_kerb/mod_auth_kerb.conf
new file mode 100644
index 0000000000..a75e692bb6
--- /dev/null
+++ b/network/mod_auth_kerb/mod_auth_kerb.conf
@@ -0,0 +1,27 @@
+
+# The mod_auth_kerb module implements Kerberos authentication over
+# HTTP, following the "Negotiate" protocol.
+#
+
+LoadModule auth_kerb_module @baselibdir@/httpd/modules/mod_auth_kerb.so
+
+#
+# Sample configuration: Kerberos authentication must only be
+# used over SSL to prevent replay attacks. The keytab file
+# configured must be readable only by the "apache" user, and
+# must contain service keys for "HTTP/www.example.com", where
+# "www.example.com" is the FQDN of this server.
+#
+
+#<Location /private>
+# SSLRequireSSL
+# AuthType Kerberos
+# AuthName "Kerberos Login"
+# KrbMethodNegotiate On
+# KrbMethodK5Passwd Off
+# KrbAuthRealms EXAMPLE.COM
+# Krb5KeyTab /etc/httpd/krb5.keytab
+# require valid-user
+#</Location>
+
+