X-Git-Url: http://www.project-moonshot.org/gitweb/?p=mod_auth_gssapi.git;a=blobdiff_plain;f=README;fp=README;h=3851f923df201932f160b5435b455be279a6a7ca;hp=9d25fb3fd774888c19a38100b256243c172e6f36;hb=7f11db955b8440668fc806b4203f584bb44f58c1;hpb=472d605d916f7ad63cd8bbffa100997eca700da4 diff --git a/README b/README index 9d25fb3..3851f92 100644 --- a/README +++ b/README @@ -237,3 +237,30 @@ The recognized mechanism names are: krb5, iakerb, ntlmssp #### Example GssapiBasicAuthMech krb5 + + +#### GssapiNameAttributes + +Enables the module to source Name Attributes from the client name +(authorization data associated with the established context) and exposes them +as environment variables. + +Value format: ENV_VAR_NAME ATTRIBUTE_NAME + +This option can be specified multiple times, once for each attribute to expose. +The Special value "json" is used to expose all attributes in a json formatted +string via the special environment variable GSS_NAME_ATTRS_JSON +The environment variable GSS_NAME_ATTR_ERROR is set with the Gssapi returned +error string in case the inquire name function fails to retrieve attributes, +and with the string "0 attributes found", if no attributes are set. + +Note: These variables are NOT saved in the session data stored in the cookie so they +are available only on the first authenticated request when GssapiUseSessions is +used. + +Note: It is recommended but not required to use only capital letters and underscores +for environment variable names. + +#### Example + GssapiNameAttributes json + GssapiNameAttributes RADIUS_NAME urn:ietf:params:gss:radius-attribute_1