ansible/roles/epylog/files/epylog-web.conf
Patrick Uiterwijk c8f5fa271c Switch epylog to krb5
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-11-24 19:53:51 +00:00

18 lines
659 B
Text

Alias /epylog /srv/web/epylog
# need these to do the auth
LoadModule auth_basic_module modules/mod_auth_basic.so
LoadModule authn_file_module modules/mod_authn_file.so
<Directory /srv/web/epylog>
Options FollowSymLinks Indexes
AuthName "Epylog GSSAPI Login"
GssapiCredStore keytab:/etc/krb5.HTTP_admin.fedoraproject.org.keytab
AuthType GSSAPI
# This is off because Apache (and thus mod_auth_gssapi) doesn't know this is proxied over TLS
GssapiSSLonly Off
GssapiLocalName on
# This should coincide with sysadmin-logs until we have group info
Require user codeblock kevin puiterwijk ralph smooge nb cydrobolt
</Directory>