- sane module load path

[packages/apache-mod_auth_kerb.git] / apache-mod_auth_kerb.conf

diff --git a/apache-mod_auth_kerb.conf b/apache-mod_auth_kerb.conf
index 7a3ba3909a4e9423d42212d6dfae6e22e4e59333..c8b8f1eb41fae1b7bc66fa593a3138393ef4e37c 100644 (file)
--- a/apache-mod_auth_kerb.conf
+++ b/apache-mod_auth_kerb.conf
@@ -1 +1,20 @@
-LoadModule auth_kerb_module /usr/lib/apache/mod_auth_kerb.so
+LoadModule auth_kerb_module modules/mod_auth_kerb.so
+
+#
+# Sample configuration: Kerberos authentication must only be
+# used over SSL to prevent replay attacks.  The keytab file
+# configured must be readable only by the "apache" user, and
+# must contain service keys for "HTTP/www.example.com", where
+# "www.example.com" is the FQDN of this server.
+#
+
+#<Location /private>
+#      SSLRequireSSL
+#      AuthType Kerberos
+#      AuthName "Kerberos Login"
+#      KrbMethodNegotiate On
+#      KrbMethodK5Passwd Off
+#      KrbAuthRealms EXAMPLE.COM
+#      Krb5KeyTab /etc/httpd/conf/keytab
+#      require valid-user
+#</Location>