mod_auth_gssapi is a new module I am working on to make Negotiate authentication more streamlined.
The main feature for FreeIPA is that it will allow the use of GSS-Proxy for all functionality as it does not use direct libkrb5 calls unlike mod_auth_kerb
It is a precondition for implementing #4189
See also https://fedorahosted.org/gss-proxy/ticket/133
Simo, would this be a good target for FreeIPA 4.2 & backport to Fedora 22?
According to Simo, this should be straightforward. mod_auth_gssapi is in Fedora already (http://koji.fedoraproject.org/koji/packageinfo?packageID=19000) and we have example for the configuration:
https://github.com/modauthgssapi/mod_auth_gssapi
Ticket has been cloned to Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1200883
master:
Metadata Update from @simo: - Issue assigned to dkupka - Issue set to the milestone: FreeIPA 4.2
Login to comment on this ticket.