X-Git-Url: http://www.project-moonshot.org/gitweb/?p=mod_auth_gssapi.git;a=blobdiff_plain;f=README;h=87b1436722dd1c365435124bb5f1bcb4bf21faba;hp=e23f745893b6e16055b81c17f2c1f493a00b083b;hb=0de0d0789d32b3517a75e77e5358303f73d84ad4;hpb=d11c2c952df6b232b17a26f8433d4919589649ad diff --git a/README b/README index e23f745..87b1436 100644 --- a/README +++ b/README @@ -89,12 +89,17 @@ authentication (like NTLMSSP) it is necessary to bind to the authentication to the connection in order to keep the state between round-trips. With this option enable incomplete context are store in the connection and retrieved on the next request for continuation. -When using this option you may also ant to set the Persistent-Auth header for -those clients that make use of it. Example: GssapiConnectionBound On - Header set Persistent-Auth "true" + + +### GssapiSignalPersistentAuth +For clients that make use of Persistent-Auth header, send the header according +to GssapiConnectionBound setting. + +Example: + GssapiSignalPersistentAuth On ### GssapiUseSessions @@ -199,3 +204,15 @@ Example: GssapiCredStore keytab:/etc/httpd/http.keytab Require valid-user + + +### GssapiAllowedMech + +List of allowed mechanisms. This is useful to restrict the mechanism that +can be used when credentials for multiple mechanisms are available. +By default no mechanism is set, this means all locally available mechanisms +are allowed. The recognized mechanism names are: krb5, iakerb, ntlmssp + +Example: + GssapiAllowedMech krb5 + GssapiAllowedMech ntlmssp