fix krb

2023-05-23 23:40:15 +02:00 · 2023-05-23 23:40:15 +02:00 · 9f051c0241
parent 46446f69d8
commit 9f051c0241
2 changed files with 4 additions and 7 deletions
--- a/roles/apache/tasks/webserver.yml
+++ b/roles/apache/tasks/webserver.yml
@ -8,6 +8,8 @@
      - apache2
      - libapache2-mod-security2
      - libapache2-mod-php
+      - libapache2-mod-auth-gssapi
+      - krb5-user


 - name: Check Wordpress default site status
--- a/roles/apache/templates/wordpress-site.conf.j2
+++ b/roles/apache/templates/wordpress-site.conf.j2
@ -41,14 +41,9 @@
 			Require ip 192.168.2.0/24
 		</RequireAny>
 		Options -Indexes
-		LoadModule auth_kerb_module /usr/lib/apache2/modules/mod_auth_kerb.so
-		AuthType Kerberos
+		AuthType GSSAPI
 		AuthName "KERBEROS AUTHENTICATION"
-		KrbAuthRealms EPITAF.LOCAL
-		Krb5Keytab /etc/krb5.keytab
-		KrbMethodNegotiate Off
-		KrbSaveCredentials Off
-		KrbVerifyKDC Off
+		GSSAPICredStore keytab:/etc/krb5.keytab
 		Require valid-user
 		AllowOverride All
 	</Directory>