source: package_branches/invirt-web/hvirt/files/etc/apache2/conf.invirt/krb.mako

<%inherit "master.mako"/>

% if cfg.web.sites.krb.port not in [80, 443]:
  Listen ${cfg.web.sites.krb.port}
% endif
<VirtualHost *:442>
        ServerAdmin ${cfg.web.errormail}
        ServerName ${cfg.web.hostname}:${cfg.web.sites.krb.port}
        <%call expr="invirt_webinterface()">
                Require valid-user
                AuthType Kerberos
                KrbMethodNegotiate on
                KrbMethodK5Passwd off
                KrbAuthoritative off
                KrbAuthRealms ${cfg.kerberos.realm}
                Krb5Keytab /etc/invirt/keytab
                KrbSaveCredentials off
        </%call>
        SSLVerifyClient optional
</VirtualHost>