Use mod_auth_gssapi instead of mod_auth_kerb
authorRob Crittenden <rcritten@redhat.com>
Tue, 14 Apr 2015 15:49:00 +0000 (11:49 -0400)
committerSimo Sorce <simo@redhat.com>
Fri, 17 Apr 2015 20:05:11 +0000 (16:05 -0400)
Change configuration on new installs only.

Enable GssapiLocalName so we have access to the local name in
REMOTE_USER and the full principle in GSS_NAME.

Enable GssapiSSLonly even though SSLRequireSSL is also set.
The belt and suspenders principla.

https://fedorahosted.org/ipsilon/ticket/89

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Reviewed-by: Simo Sorce <simo@redhat.com>

No differences found