"Fossies" - the Fresh Open Source Software Archive

Member "mod_auth_gssapi-1.6.3/tests/httpd.conf" (5 Aug 2020, 10685 Bytes) of package /linux/www/apache_httpd_modules/mod_auth_gssapi-1.6.3.tar.gz:


As a special service "Fossies" has tried to format the requested source page into HTML format using (guessed) Generic config files source code syntax highlighting (style: standard) with prefixed line numbers. Alternatively you can here view or download the uninterpreted source code file. See also the latest Fossies "Diffs" side-by-side code changes report for "httpd.conf": 1.6.2_vs_1.6.3.

    1 ServerRoot "{HTTPROOT}"
    2 ServerName "{HTTPNAME}"
    3 Listen {HTTPADDR}:{HTTPPORT}
    4 Listen {HTTPADDR}:{PROXYPORT}
    5 
    6 LoadModule access_compat_module modules/mod_access_compat.so
    7 LoadModule actions_module modules/mod_actions.so
    8 LoadModule alias_module modules/mod_alias.so
    9 LoadModule allowmethods_module modules/mod_allowmethods.so
   10 LoadModule auth_basic_module modules/mod_auth_basic.so
   11 #LoadModule auth_digest_module modules/mod_auth_digest.so
   12 LoadModule authn_anon_module modules/mod_authn_anon.so
   13 LoadModule authn_core_module modules/mod_authn_core.so
   14 LoadModule authn_dbd_module modules/mod_authn_dbd.so
   15 LoadModule authn_dbm_module modules/mod_authn_dbm.so
   16 LoadModule authn_file_module modules/mod_authn_file.so
   17 LoadModule authn_socache_module modules/mod_authn_socache.so
   18 LoadModule authz_core_module modules/mod_authz_core.so
   19 LoadModule authz_dbd_module modules/mod_authz_dbd.so
   20 LoadModule authz_dbm_module modules/mod_authz_dbm.so
   21 LoadModule authz_groupfile_module modules/mod_authz_groupfile.so
   22 LoadModule authz_host_module modules/mod_authz_host.so
   23 LoadModule authz_owner_module modules/mod_authz_owner.so
   24 LoadModule authz_user_module modules/mod_authz_user.so
   25 LoadModule autoindex_module modules/mod_autoindex.so
   26 LoadModule cache_module modules/mod_cache.so
   27 LoadModule cache_disk_module modules/mod_cache_disk.so
   28 LoadModule data_module modules/mod_data.so
   29 LoadModule dbd_module modules/mod_dbd.so
   30 LoadModule deflate_module modules/mod_deflate.so
   31 LoadModule dir_module modules/mod_dir.so
   32 LoadModule dumpio_module modules/mod_dumpio.so
   33 LoadModule echo_module modules/mod_echo.so
   34 LoadModule env_module modules/mod_env.so
   35 LoadModule expires_module modules/mod_expires.so
   36 LoadModule ext_filter_module modules/mod_ext_filter.so
   37 LoadModule filter_module modules/mod_filter.so
   38 LoadModule headers_module modules/mod_headers.so
   39 LoadModule include_module modules/mod_include.so
   40 LoadModule info_module modules/mod_info.so
   41 <IfModule !log_config_module>
   42     LoadModule log_config_module modules/mod_log_config.so
   43 </IfModule>
   44 <IfModule !logio_module>
   45     LoadModule logio_module modules/mod_logio.so
   46 </IfModule>
   47 LoadModule macro_module modules/mod_macro.so
   48 LoadModule mime_magic_module modules/mod_mime_magic.so
   49 LoadModule mime_module modules/mod_mime.so
   50 LoadModule negotiation_module modules/mod_negotiation.so
   51 LoadModule remoteip_module modules/mod_remoteip.so
   52 LoadModule reqtimeout_module modules/mod_reqtimeout.so
   53 LoadModule rewrite_module modules/mod_rewrite.so
   54 LoadModule session_module modules/mod_session.so
   55 LoadModule session_cookie_module modules/mod_session_cookie.so
   56 LoadModule setenvif_module modules/mod_setenvif.so
   57 LoadModule slotmem_plain_module modules/mod_slotmem_plain.so
   58 LoadModule slotmem_shm_module modules/mod_slotmem_shm.so
   59 LoadModule socache_dbm_module modules/mod_socache_dbm.so
   60 LoadModule socache_memcache_module modules/mod_socache_memcache.so
   61 LoadModule socache_shmcb_module modules/mod_socache_shmcb.so
   62 LoadModule status_module modules/mod_status.so
   63 LoadModule substitute_module modules/mod_substitute.so
   64 LoadModule suexec_module modules/mod_suexec.so
   65 LoadModule unique_id_module modules/mod_unique_id.so
   66 <IfModule !unixd_module>
   67     LoadModule unixd_module modules/mod_unixd.so
   68 </IfModule>
   69 LoadModule userdir_module modules/mod_userdir.so
   70 <IfModule !version_module>
   71     LoadModule version_module modules/mod_version.so
   72 </IfModule>
   73 LoadModule vhost_alias_module modules/mod_vhost_alias.so
   74 LoadModule mpm_prefork_module modules/mod_mpm_prefork.so
   75 LoadModule proxy_module modules/mod_proxy.so
   76 LoadModule proxy_http_module modules/mod_proxy_http.so
   77 
   78 LoadModule auth_gssapi_module mod_auth_gssapi.so
   79 
   80 Mutex file:{HTTPROOT}
   81 
   82 <Directory />
   83     Options +Includes
   84     AddOutputFilter INCLUDES .html
   85     AllowOverride none
   86     Require all denied
   87 </Directory>
   88 
   89 DocumentRoot "{HTTPROOT}/html"
   90 <Directory "{HTTPROOT}">
   91     AllowOverride None
   92     # Allow open access:
   93     Require all granted
   94 </Directory>
   95 <Directory "{HTTPROOT}/html">
   96     Options Indexes FollowSymLinks
   97     Options +Includes
   98     AddOutputFilter INCLUDES .html
   99     AllowOverride None
  100     Require all granted
  101 </Directory>
  102 
  103 <IfModule dir_module>
  104     DirectoryIndex index.html
  105 </IfModule>
  106 
  107 <Files ".ht*">
  108     Require all denied
  109 </Files>
  110 
  111 PidFile "{HTTPROOT}/logs/httpd.pid"
  112 
  113 <IfModule log_config_module>
  114 LogFormat "%h %l %u %t \"%r\" %>s %b \"%{{Referer}}i\" \"%{{User-Agent}}i\" \"%{{Cookie}}i\"" combined
  115 CustomLog "logs/access_log" combined
  116 </IfModule>
  117 
  118 ErrorDocument 401 /401.html
  119 ErrorLog "logs/error_log"
  120 LogLevel debug
  121 
  122 <IfModule mime_module>
  123     TypesConfig /etc/mime.types
  124     AddType application/x-compress .Z
  125     AddType application/x-gzip .gz .tgz
  126     AddType text/html .shtml
  127     AddOutputFilter INCLUDES .shtml
  128 </IfModule>
  129 
  130 AddDefaultCharset UTF-8
  131 
  132 IncludeOptional conf.d/*.conf
  133 
  134 CoreDumpDirectory "{HTTPROOT}"
  135 
  136 
  137 <Location /spnego>
  138   AuthType GSSAPI
  139   AuthName "Login"
  140   GssapiSSLonly Off
  141   GssapiUseSessions On
  142   Session On
  143   SessionCookieName gssapi_session path=/spnego;httponly
  144   GssapiSessionKey file:{HTTPROOT}/session.key
  145   GssapiCredStore ccache:{HTTPROOT}/tmp/httpd_krb5_ccache
  146   GssapiCredStore client_keytab:{HTTPROOT}/http.keytab
  147   GssapiCredStore keytab:{HTTPROOT}/http.keytab
  148   GssapiDelegCcacheDir {HTTPROOT}
  149   GssapiDelegCcachePerms mode:0666
  150   GssapiBasicAuth Off
  151   GssapiAllowedMech krb5
  152   Require valid-user
  153 </Location>
  154 
  155 <Location /spnego_rewrite>
  156   Options +Includes
  157   AddOutputFilter INCLUDES .html
  158 
  159   AuthType GSSAPI
  160   AuthName "Login"
  161   GssapiCredStore ccache:{HTTPROOT}/tmp/httpd_krb5_ccache
  162   GssapiCredStore keytab:{HTTPROOT}/http.keytab
  163   GssapiAllowedMech krb5
  164   Require valid-user
  165 
  166   RewriteEngine on
  167   RewriteCond %{{REQUEST_FILENAME}} !-d
  168   RewriteCond %{{REQUEST_FILENAME}} !-f
  169   RewriteRule . /spnego_rewrite/index.html [L]
  170 </Location>
  171 
  172 <Location /spnego_negotiate_once>
  173   AuthType GSSAPI
  174   AuthName "Login Negotiate Once"
  175   GssapiSSLonly Off
  176   GssapiUseSessions On
  177   Session On
  178   SessionCookieName gssapi_session path=/spnego_negotiate_once;httponly
  179   GssapiCredStore ccache:{HTTPROOT}/tmp/httpd_krb5_ccache
  180   GssapiCredStore client_keytab:{HTTPROOT}/http.keytab
  181   GssapiCredStore keytab:{HTTPROOT}/http.keytab
  182   GssapiBasicAuth Off
  183   GssapiAllowedMech krb5
  184   GssapiNegotiateOnce On
  185   Require valid-user
  186 </Location>
  187 
  188 <Location /basic_auth_krb5>
  189   Options +Includes
  190   AddOutputFilter INCLUDES .html
  191   AuthType GSSAPI
  192   AuthName "Password Login"
  193   GssapiSSLonly Off
  194   GssapiCredStore ccache:{HTTPROOT}/tmp/httpd_krb5_ccache
  195   GssapiCredStore client_keytab:{HTTPROOT}/http.keytab
  196   GssapiCredStore keytab:{HTTPROOT}/http.keytab
  197   GssapiBasicAuth On
  198   GssapiBasicAuthMech krb5
  199   GssapiConnectionBound On
  200   GssapiPublishErrors On
  201   Require valid-user
  202 </Location>
  203 
  204 <Location /bad_acceptor_name>
  205   AuthType GSSAPI
  206   AuthName "Bad Acceptor Name"
  207   GssapiSSLonly Off
  208   GssapiCredStore ccache:{HTTPROOT}/tmp/httpd_krb5_ccache
  209   GssapiCredStore client_keytab:{HTTPROOT}/http.keytab
  210   GssapiCredStore keytab:{HTTPROOT}/http.keytab
  211   GssapiAcceptorName BAD@example.com
  212   Require valid-user
  213 </Location>
  214 
  215 <Location /nonego>
  216   BrowserMatch NONEGO gssapi-no-negotiate
  217   AuthType GSSAPI
  218   AuthName "Login"
  219   GssapiSSLonly Off
  220   GssapiCredStore ccache:{HTTPROOT}/tmp/httpd_krb5_ccache
  221   GssapiCredStore client_keytab:{HTTPROOT}/http.keytab
  222   GssapiCredStore keytab:{HTTPROOT}/http.keytab
  223   GssapiBasicAuth On
  224   GssapiAllowedMech krb5
  225   Require valid-user
  226 </Location>
  227 
  228 <Location /hostname_acceptor>
  229   AuthType GSSAPI
  230   AuthName "Login"
  231   GssapiSSLonly Off
  232   GssapiCredStore ccache:{HTTPROOT}/tmp/httpd_krb5_ccache
  233   GssapiCredStore client_keytab:{HTTPROOT}/http.keytab
  234   GssapiCredStore keytab:{HTTPROOT}/http.keytab
  235   GssapiBasicAuth Off
  236   GssapiAllowedMech krb5
  237   GssapiAcceptorName {{HOSTNAME}}
  238   Require valid-user
  239 </Location>
  240 
  241 <Location /required_name_attr1>
  242   AuthType GSSAPI
  243   AuthName "Required Name Attributes"
  244   GssapiCredStore keytab:{HTTPROOT}/http.keytab
  245   GssapiRequiredNameAttributes auth-indicators=na1
  246   LogLevel debug
  247   Require valid-user
  248 </Location>
  249 
  250 <Location /required_name_attr2>
  251   AuthType GSSAPI
  252   AuthName "Required Name Attributes"
  253   GssapiCredStore keytab:{HTTPROOT}/http.keytab
  254   GssapiRequiredNameAttributes auth-indicators:=bmEx
  255   LogLevel debug
  256   Require valid-user
  257 </Location>
  258 
  259 <Location /required_name_attr3>
  260   AuthType GSSAPI
  261   AuthName "Required Name Attributes"
  262   GssapiCredStore keytab:{HTTPROOT}/http.keytab
  263   GssapiRequiredNameAttributes (auth-indicators=foo and auth-indicators=na2) or auth-indicators=na3
  264   LogLevel debug
  265   Require valid-user
  266 </Location>
  267 
  268 <Location /required_name_attr4>
  269   AuthType GSSAPI
  270   AuthName "Required Name Attributes"
  271   GssapiCredStore keytab:{HTTPROOT}/http.keytab
  272   GssapiRequiredNameAttributes auth-indicators=foo
  273   LogLevel debug
  274   Require valid-user
  275 </Location>
  276 
  277 <Location /gss_localname>
  278   AuthType GSSAPI
  279   AuthName "Login"
  280   GssapiSSLonly Off
  281   GssapiCredStore ccache:{HTTPROOT}/tmp/httpd_krb5_ccache
  282   GssapiCredStore client_keytab:{HTTPROOT}/http.keytab
  283   GssapiCredStore keytab:{HTTPROOT}/http.keytab
  284   GssapiBasicAuth Off
  285   GssapiAllowedMech krb5
  286   GssapiLocalName On
  287   Require valid-user
  288 </Location>
  289 
  290 <VirtualHost *:{PROXYPORT}>
  291   ProxyRequests On
  292   ProxyVia On
  293 
  294   <Proxy *>
  295     AuthType GSSAPI
  296     AuthName "Proxy Login"
  297     GssapiCredStore ccache:{HTTPROOT}/tmp/httpd_krb5_ccache
  298     GssapiCredStore client_keytab:{HTTPROOT}/http.keytab
  299     GssapiCredStore keytab:{HTTPROOT}/http.keytab
  300     GssapiBasicAuth On
  301     Require valid-user
  302   </Proxy>
  303 </VirtualHost>
  304 
  305 <Location /basic_auth_timeout/auth>
  306   Options +Includes
  307   AddOutputFilter INCLUDES .html
  308   AuthType GSSAPI
  309   AuthName "Password Login"
  310   GssapiSSLonly Off
  311   GssapiUseSessions On
  312   Session On
  313   SessionCookieName gssapi_session path=/basic_auth_timeout;httponly
  314   GssapiSessionKey file:{HTTPROOT}/session.key
  315   GssapiCredStore keytab:{HTTPROOT}/http.keytab
  316   GssapiBasicAuth On
  317   GssapiBasicAuthMech krb5
  318   GssapiBasicTicketTimeout 400
  319   GssapiDelegCcacheDir {HTTPROOT}
  320   Require valid-user
  321 </Location>
  322 <Location /basic_auth_timeout/session>
  323   Options +Includes
  324   AddOutputFilter INCLUDES .html
  325   AuthType GSSAPI
  326   AuthName "Session Login"
  327   GssapiSSLonly Off
  328   GssapiUseSessions On
  329   Session On
  330   SessionCookieName gssapi_session path=/basic_auth_timeout;httponly
  331   GssapiSessionKey file:{HTTPROOT}/session.key
  332   Require valid-user
  333 </Location>
  334 
  335 <Location /mech_name>
  336   Options +Includes
  337   AddOutputFilter INCLUDES .html
  338   AuthType GSSAPI
  339   AuthName "Password Login"
  340   GssapiSSLonly Off
  341   GssapiCredStore ccache:{HTTPROOT}/tmp/httpd_krb5_ccache
  342   GssapiCredStore client_keytab:{HTTPROOT}/http.keytab
  343   GssapiCredStore keytab:{HTTPROOT}/http.keytab
  344   GssapiBasicAuth On
  345   GssapiBasicAuthMech krb5
  346   GssapiPublishMech On
  347   Require valid-user
  348 </Location>