From 1e3d8e4cc15dcbb0de5898e202089670f1659af3 Mon Sep 17 00:00:00 2001
From: Simo Sorce <simo@redhat.com>
Date: Wed, 22 Jan 2014 11:40:57 -0500
Subject: [PATCH] Add sample apache configuration

Signed-off-by: Simo Sorce <simo@redhat.com>
---
 examples/apache.conf | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)
 create mode 100644 examples/apache.conf

diff --git a/examples/apache.conf b/examples/apache.conf
new file mode 100644
index 0000000..1347916
--- /dev/null
+++ b/examples/apache.conf
@@ -0,0 +1,26 @@
+Alias /idp/ui /var/www/idp/ipsilon/ui
+WSGIScriptAlias /idp /var/www/idp/ipsilon/ipsilon/idpserver.py
+WSGIDaemonProcess idp python-path=/var/www/idp/ipsilon/ipsilon home=/var/www/idp/ipsilon/ipsilon maximum-requests=2 user=ipsilon group=ipsilon
+WSGIProcessGroup idp
+
+<Location /idp/login/krb/negotiate>
+  AuthType Kerberos
+  AuthName "Kerberos Login"
+  KrbMethodNegotiate on
+  KrbMethodK5Passwd off
+  KrbServiceName HTTP
+  KrbAuthRealms IPA.DEV.LAN
+  Krb5KeyTab /etc/httpd/conf/http.keytab
+  KrbSaveCredentials off
+  KrbConstrainedDelegation off
+  KrbLocalUserMapping On
+  Require valid-user
+
+  ErrorDocument 401 /idp/login/krb/unauthorized
+</Location>
+
+<Directory /idp>
+    Order allow,deny
+    Allow from all
+</Directory>
+
-- 
2.20.1