<%inherit "master.mako"/> Listen ${cfg.web.sites.krb.port} ServerAdmin ${cfg.web.errormail} ServerName ${cfg.web.hostname}:${cfg.web.sites.krb.port} <%call expr="invirt_webinterface()"> Require valid-user AuthType Kerberos KrbMethodNegotiate on KrbMethodK5Passwd off KrbAuthoritative off KrbAuthRealms ${cfg.kerberos.realm} Krb5Keytab /etc/invirt/keytab KrbSaveCredentials off SSLVerifyClient optional