X-Git-Url: http://www.project-moonshot.org/gitweb/?p=mod_auth_gssapi.git;a=blobdiff_plain;f=README;h=3851f923df201932f160b5435b455be279a6a7ca;hp=709185012b80363d4cd2f5c099060ab6eaf99883;hb=7f11db955b8440668fc806b4203f584bb44f58c1;hpb=7d7e020f0b9ad103c7129ede66854f7b02a16add diff --git a/README b/README index 7091850..3851f92 100644 --- a/README +++ b/README @@ -20,6 +20,14 @@ provided without these extensions. krb5 (>=1.11) Apache (>=2.4) +### Tests + +To run tests, you also need: + +* The Kerberos 5 Key-Distribution-Center (`krb5-kdc` package on Debian) +* [nss_wrapper](https://cwrap.org/nss_wrapper.html) +* [socket_wrapper](https://cwrap.org/socket_wrapper.html) + Installation ------------ @@ -229,3 +237,30 @@ The recognized mechanism names are: krb5, iakerb, ntlmssp #### Example GssapiBasicAuthMech krb5 + + +#### GssapiNameAttributes + +Enables the module to source Name Attributes from the client name +(authorization data associated with the established context) and exposes them +as environment variables. + +Value format: ENV_VAR_NAME ATTRIBUTE_NAME + +This option can be specified multiple times, once for each attribute to expose. +The Special value "json" is used to expose all attributes in a json formatted +string via the special environment variable GSS_NAME_ATTRS_JSON +The environment variable GSS_NAME_ATTR_ERROR is set with the Gssapi returned +error string in case the inquire name function fails to retrieve attributes, +and with the string "0 attributes found", if no attributes are set. + +Note: These variables are NOT saved in the session data stored in the cookie so they +are available only on the first authenticated request when GssapiUseSessions is +used. + +Note: It is recommended but not required to use only capital letters and underscores +for environment variable names. + +#### Example + GssapiNameAttributes json + GssapiNameAttributes RADIUS_NAME urn:ietf:params:gss:radius-attribute_1