X-Git-Url: http://www.project-moonshot.org/gitweb/?a=blobdiff_plain;f=README;h=0906b7cf771b3e5530ac9c0acf5d9789f8c954fa;hb=1d08fb323c60e806bccd7d0820505c15f904894e;hp=1ec8ac1e4d4ac453debc51020dd057f587da777c;hpb=60ebe8f57fa055b37235db55a56936aef565b970;p=mod_auth_kerb.git diff --git a/README b/README index 1ec8ac1..0906b7c 100644 --- a/README +++ b/README @@ -59,9 +59,15 @@ KrbVerifyKDC on | off (set to on by default) keytab to prevent KDC spoofing atacks. It should be used only for testing purposes. You have been warned. -KrbServiceName service (set to HTTP by default) - For specification the service name that will be used by Apache for - authentication. Corresponding key of this name must be stored in the keytab. +KrbServiceName server_principal + Specifies a principal name to use by Apache when authenticating the clients. + By default value of the form + HTTP/@ + is used. The FQDN part can contain any hostname and can be used to work + around problems with misconfigured DNS. A corresponding key of this name + must be stored in the keytab. + If this option is set to 'Any', then any prinicpal from the keytab which + matches the client's request may be used. Krb4Srvtab /path/to/srvtab This option takes one argument, specifying the path to the Kerberos V4 @@ -116,5 +122,4 @@ KrbSaveCredentials, the tickets will be retrieved into a ticket file or credential cache that will be available for the request handler. The ticket file will be removed after request is handled. -$Id: README,v 1.8 2004/01/13 -14:31:53 kouril Exp $ +$Id$