This is an automated email from the git hooks/post-receive script.
rharwood pushed a change to branch master in repository gssproxy.
from 8590c5d Do not call gpm_grab_sock() twice new 8f08c77 Update Apache docs to reflect config file split
The 1 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "adds" were already present in the repository and have only been added to this reference.
Summary of changes: proxy/docs/Apache.md | 13 ++++--------- 1 file changed, 4 insertions(+), 9 deletions(-)
This is an automated email from the git hooks/post-receive script.
rharwood pushed a commit to branch master in repository gssproxy.
commit 8f08c7710a266826c0a91e565ec9159f75c04ba5 Author: Robbie Harwood rharwood@redhat.com Date: Tue Sep 12 17:37:59 2017 -0400
Update Apache docs to reflect config file split
Signed-off-by: Robbie Harwood rharwood@redhat.com Reviewed-by: Simo Sorce simo@redhat.com Merges: #212 --- proxy/docs/Apache.md | 13 ++++--------- 1 file changed, 4 insertions(+), 9 deletions(-)
diff --git a/proxy/docs/Apache.md b/proxy/docs/Apache.md index 823457e..39e0139 100644 --- a/proxy/docs/Apache.md +++ b/proxy/docs/Apache.md @@ -28,15 +28,10 @@ file, because GSS-Proxy uses the effective uid to distinguish the services. On my installation, the uid is 48. Symbolic uids are also supported (e.g., "httpd" or "apache").
-We add a new section to the ```/etc/gssproxy/gssproxy.conf``` configuration file. This section has to be before any section which might have ```allow_any_uid = yes```, namely gssproxy-0.3.0 in its ```service/nfs-client```: - -``` -[service/HTTP] - mechs = krb5 - cred_store = keytab:/etc/gssproxy/http.keytab - cred_store = ccache:/var/lib/gssproxy/clients/krb5cc_%U - euid = 48 -``` +We add a new section to the gssproxy configuration. To do this, copy the +```examples/80-httpd.conf``` file to ```/etc/gssproxy/80-httpd.conf```. (If +you are using a monolithic config file at ```/etc/gssproxy/gssproxy.conf```, +make sure the HTTP stanza preceeds any ```allow_any_uid=yes``` sections.)
We then start the service:
gss-proxy@lists.fedorahosted.org