Add server-install plugin configuration support
[cascardo/ipsilon.git] / examples / apache.conf
1 Alias /idp/ui /usr/share/ipsilon/ui
2 WSGIScriptAlias /idp /usr/sbin/ipsilon.py
3 WSGIDaemonProcess idp maximum-requests=2 user=ipsilon group=ipsilon
4 WSGIProcessGroup idp
5
6 <Location /idp/login/krb/negotiate>
7   AuthType Kerberos
8   AuthName "Kerberos Login"
9   KrbMethodNegotiate on
10   KrbMethodK5Passwd off
11   KrbServiceName HTTP
12   KrbAuthRealms IPA.DEV.LAN
13   Krb5KeyTab /etc/httpd/conf/http.keytab
14   KrbSaveCredentials off
15   KrbConstrainedDelegation off
16   KrbLocalUserMapping On
17   Require valid-user
18
19   ErrorDocument 401 /idp/login/krb/unauthorized
20 </Location>
21
22 <Directory /usr/sbin>
23     Order allow,deny
24     Allow from all
25     Require all granted
26 </Directory>
27