doc: GssapiLocalName should be off
This commit is contained in:
parent
7b60e0e7eb
commit
5629ff59a0
2 changed files with 1 additions and 20 deletions
|
|
@ -588,7 +588,6 @@ Configuration Files
|
|||
* ``/etc/httpd/conf/httpd.conf``
|
||||
* ``/etc/httpd/conf.d/kojihub.conf``
|
||||
* ``/etc/httpd/conf.d/ssl.conf`` (when using ssl auth)
|
||||
* ``/etc/krb5.conf`` (when using GSSAPI auth)
|
||||
|
||||
Install koji-hub
|
||||
----------------
|
||||
|
|
@ -653,24 +652,6 @@ options should point to where the certificates are located on the hub.
|
|||
# https://bugs.python.org/issue34670
|
||||
SSLProtocol TLSv1.2
|
||||
|
||||
/etc/krb5.conf
|
||||
^^^^^^^^^^^^^^
|
||||
|
||||
If Apache's mod_auth_gssapi is enabled on hub, ``auth_to_local`` rules should
|
||||
be configured as below.
|
||||
|
||||
::
|
||||
|
||||
[realms]
|
||||
EXAMPLE.COM = {
|
||||
...
|
||||
auth_to_local = RULE:[1:$1@$0](.*@OTHER\.COM)s/@.*/@EXAMPLE.COM/
|
||||
auth_to_local = RULE:[1:$1@$0](.*@EXAMPLE\.COM)
|
||||
auth_to_local = RULE:[2:$1/$2@$0](.*@OTHER\.COM)s/@.*/@EXAMPLE.COM/
|
||||
auth_to_local = RULE:[2:$1/$2@$0](.*@EXAMPLE\.COM)
|
||||
...
|
||||
}
|
||||
|
||||
/etc/koji-hub/hub.conf
|
||||
^^^^^^^^^^^^^^^^^^^^^^
|
||||
|
||||
|
|
|
|||
|
|
@ -60,7 +60,7 @@ Alias /kojifiles "/mnt/koji/"
|
|||
# <Location /kojihub/ssllogin>
|
||||
# AuthType GSSAPI
|
||||
# GssapiSSLonly Off
|
||||
# GssapiLocalName On
|
||||
# GssapiLocalName Off
|
||||
# AuthName "GSSAPI Single Sign On Login"
|
||||
# GssapiCredStore keytab:/etc/koji.keytab
|
||||
# Require valid-user
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue