HomeSoftware Heritage

Support mod_auth_gssapi parameters

Description

Support mod_auth_gssapi parameters

mod_auth_gssapi parameters can only used inside a directory section of a vhost.

Parameters are specified as a hash gssapi to the directories parameter.

Currently only the three obvious parameters are supported, adding extra ones is a
trivial addition to the _gssapi.epp template.

Example

puppet
include apache::mod::auth_gssapi
apache::vhost { 'sample.example.net':
  docroot     => '/path/to/directory',
  directories => [
    { path   => '/path/to/different/dir',
      gssapi => {
        credstore => 'keytab:/foo/bar.keytab',
        localname => 'Off',
        sslonly   => 'On',
      }
    },
  ],

These 3 values match to an apache configuration of

config
<Directory /path/to/directory>
  GssapiSSLonly Off
  GssapiLocalName On
  GssapiCredStore keytab:/foo/bar.keytab
</Directory>

https://github.com/gssapi/mod_auth_gssapi#gssapisslonly

Details

Provenance
Steve Traylen <steve.traylen@cern.ch>Authored on Oct 23 2020, 1:23 PM
Steve Traylen <steve@traylen.net>Committed on Oct 23 2020, 4:23 PM
olasdPushed on Dec 28 2021, 10:47 AM
Parents
rSPAPA3877dd92380b: Merge pull request #2074 from sanfrancrisko/fix/pr-2060-incorrect-branch
Branches
Unknown
Tags
Unknown

Event Timeline

Steve Traylen <steve@traylen.net> committed rSPAPA891fdaf24992: Support mod_auth_gssapi parameters (authored by Steve Traylen <steve.traylen@cern.ch>).Oct 23 2020, 4:23 PM