1 LoadModule lookup_identity_module modules/mod_lookup_identity.so
5 AuthName "Kerberos Login"
8 KrbAuthRealms EXAMPLE.COM
9 Krb5KeyTab /etc/krb5.keytab
16 RequestHeader set X-SSSD-REMOTE_USER expr=%{REMOTE_USER}
17 RequestHeader set X-SSSD-AUTH_TYPE expr=%{AUTH_TYPE}
18 RequestHeader set X-SSSD-REMOTE_HOST expr=%{REMOTE_HOST}
19 RequestHeader set X-SSSD-REMOTE_ADDR expr=%{REMOTE_ADDR}
20 LookupUserAttr mail REMOTE_USER_EMAIL
21 RequestHeader set X-SSSD-REMOTE_USER_EMAIL %{REMOTE_USER_EMAIL}e
22 LookupUserAttr givenname REMOTE_USER_FIRSTNAME
23 RequestHeader set X-SSSD-REMOTE_USER_FIRSTNAME %{REMOTE_USER_FIRSTNAME}e
24 LookupUserAttr sn REMOTE_USER_LASTNAME
25 RequestHeader set X-SSSD-REMOTE_USER_LASTNAME %{REMOTE_USER_LASTNAME}e
26 LookupUserGroups REMOTE_USER_GROUPS ":"
27 RequestHeader set X-SSSD-REMOTE_USER_GROUPS %{REMOTE_USER_GROUPS}e
30 ProxyPass / http://localhost:8383/
31 ProxyPassReverse / http://localhost:8383/