<%inherit "master.mako"/> % if cfg.web.sites.krb.port not in [80, 443]: Listen ${cfg.web.sites.krb.port} % endif ServerAdmin ${cfg.web.errormail} ServerName ${cfg.web.hostname}:${cfg.web.sites.krb.port} <%call expr="invirt_webinterface()"> Require valid-user AuthType Kerberos KrbMethodNegotiate on KrbMethodK5Passwd off KrbAuthoritative off KrbAuthRealms ${cfg.kerberos.realm} Krb5Keytab /etc/invirt/keytab KrbSaveCredentials off SSLVerifyClient optional