Better handling of configuration file
[cascardo/ipsilon.git] / examples / apache.conf
1 Alias /idp/ui /var/www/idp/ipsilon/ui
2 WSGIScriptAlias /idp /var/www/idp/ipsilon/ipsilon/idpserver.py
3 WSGIDaemonProcess idp python-path=/var/www/idp/ipsilon/ipsilon home=/var/www/idp/ipsilon/ipsilon maximum-requests=2 user=ipsilon group=ipsilon
4 WSGIProcessGroup idp
5
6 <Location /idp/login/krb/negotiate>
7   AuthType Kerberos
8   AuthName "Kerberos Login"
9   KrbMethodNegotiate on
10   KrbMethodK5Passwd off
11   KrbServiceName HTTP
12   KrbAuthRealms IPA.DEV.LAN
13   Krb5KeyTab /etc/httpd/conf/http.keytab
14   KrbSaveCredentials off
15   KrbConstrainedDelegation off
16   KrbLocalUserMapping On
17   Require valid-user
18
19   ErrorDocument 401 /idp/login/krb/unauthorized
20 </Location>
21
22 <Directory /idp>
23     Order allow,deny
24     Allow from all
25 </Directory>
26