This is an automated email from the git hooks/post-receive script.
rharwood pushed a commit to branch master in repository gssproxy.
commit 8f08c7710a266826c0a91e565ec9159f75c04ba5 Author: Robbie Harwood rharwood@redhat.com Date: Tue Sep 12 17:37:59 2017 -0400
Update Apache docs to reflect config file split
Signed-off-by: Robbie Harwood rharwood@redhat.com Reviewed-by: Simo Sorce simo@redhat.com Merges: #212 --- proxy/docs/Apache.md | 13 ++++--------- 1 file changed, 4 insertions(+), 9 deletions(-)
diff --git a/proxy/docs/Apache.md b/proxy/docs/Apache.md index 823457e..39e0139 100644 --- a/proxy/docs/Apache.md +++ b/proxy/docs/Apache.md @@ -28,15 +28,10 @@ file, because GSS-Proxy uses the effective uid to distinguish the services. On my installation, the uid is 48. Symbolic uids are also supported (e.g., "httpd" or "apache").
-We add a new section to the ```/etc/gssproxy/gssproxy.conf``` configuration file. This section has to be before any section which might have ```allow_any_uid = yes```, namely gssproxy-0.3.0 in its ```service/nfs-client```: - -``` -[service/HTTP] - mechs = krb5 - cred_store = keytab:/etc/gssproxy/http.keytab - cred_store = ccache:/var/lib/gssproxy/clients/krb5cc_%U - euid = 48 -``` +We add a new section to the gssproxy configuration. To do this, copy the +```examples/80-httpd.conf``` file to ```/etc/gssproxy/80-httpd.conf```. (If +you are using a monolithic config file at ```/etc/gssproxy/gssproxy.conf```, +make sure the HTTP stanza preceeds any ```allow_any_uid=yes``` sections.)
We then start the service: