Use mod_auth_gssapi instead of mod_auth_kerb
authorRob Crittenden <rcritten@redhat.com>
Tue, 14 Apr 2015 15:49:00 +0000 (11:49 -0400)
committerSimo Sorce <simo@redhat.com>
Fri, 17 Apr 2015 20:05:11 +0000 (16:05 -0400)
commit7e33a3a2df613ecdfd49d621f7cc7a6424d4f96f
treec0a977e398b95306de3ffa939dcfc5989c5062e9
parenteaaffe854977912f9a4c0cc477197bd8ba96230f
Use mod_auth_gssapi instead of mod_auth_kerb

Change configuration on new installs only.

Enable GssapiLocalName so we have access to the local name in
REMOTE_USER and the full principle in GSS_NAME.

Enable GssapiSSLonly even though SSLRequireSSL is also set.
The belt and suspenders principla.

https://fedorahosted.org/ipsilon/ticket/89

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Reviewed-by: Simo Sorce <simo@redhat.com>
README
contrib/fedora/ipsilon.spec
doc/design.txt
ipsilon/login/authkrb.py