particle-os/debian-koji
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix docs for mod_auth_gssapi

Browse source
This commit is contained in:
Tomas Kopecek 2017-06-01 09:56:37 +02:00 • committed by Mike McLean
parent c18c6bbfa4
commit 6f8df41889
2 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

4
docs/source/server_howto.rst
View file

@ -343,12 +343,12 @@ currently hard coded into the koji client.
``HTTP/kojiweb@EXAMPLE.COM``
Used by the koji-web server when performing a negotiated Kerberos
authentication with a web browser. This is a service principal for
Apache's mod_auth_kerb.
Apache's mod_auth_gssapi.
``koji/kojiweb@EXAMPLE.COM``
Used by the koji-web server during communications with the koji-hub. This
is a user principal that will authenticate koji-web to Kerberos as
"koji/kojiweb@EXAMPLE.COM". Koji-web will proxy the mod_auth_kerb user
"koji/kojiweb@EXAMPLE.COM". Koji-web will proxy the mod_auth_gssapi user
information to koji-hub (the <code>ProxyPrincipals</code> koji-hub config
option).

2
www/kojiweb/index.py
View file

@ -244,7 +244,7 @@ def login(environ, page=None):
elif options['WebPrincipal']:
principal = environ.get('REMOTE_USER')
if not principal:
raise koji.AuthError('configuration error: mod_auth_kerb should have performed authentication before presenting this page')
raise koji.AuthError('configuration error: mod_auth_gssapi should have performed authentication before presenting this page')
if not _krbLogin(environ, session, principal):
raise koji.AuthError('could not login using principal: %s' % principal)