39 lines
1.2 KiB
Diff
39 lines
1.2 KiB
Diff
From 850e6d452e3ce4d46122f216613c4a14ec398686 Mon Sep 17 00:00:00 2001
|
|
From: Robbie Harwood <rharwood@redhat.com>
|
|
Date: Thu, 19 Oct 2017 16:35:29 -0400
|
|
Subject: [PATCH] Document gssapi-no-negotiate
|
|
|
|
Adds new section for apache env vars.
|
|
|
|
(cherry picked from commit 5330fa4959ca9317bf5943decfaaf0bbe86f1853)
|
|
---
|
|
README | 18 ++++++++++++++++++
|
|
1 file changed, 18 insertions(+)
|
|
|
|
diff --git a/README b/README
|
|
index 1fdfe98..1393760 100644
|
|
--- a/README
|
|
+++ b/README
|
|
@@ -418,3 +418,21 @@ Note: The GSS_C_NT_HOSTBASED_SERVICE format is used for names (see example).
|
|
#### Example
|
|
GssapiAcceptorName HTTP@www.example.com
|
|
|
|
+Environment Variables
|
|
+---------------------
|
|
+
|
|
+(Note: these are not process environment variables, but rather Apache
|
|
+environment variables, as described
|
|
+[in the apache docs](https://httpd.apache.org/docs/2.4/env.html).)
|
|
+
|
|
+### gssapi-no-negotiate
|
|
+
|
|
+This environment variable is used to suppress setting Negotiate headers. Not
|
|
+sending these headers is useful to work around browsers that do not handle
|
|
+them properly (and incorrectly show authentication popups to users).
|
|
+
|
|
+#### Example
|
|
+
|
|
+For instance, to suppress negotiation on Windows browsers, one could set:
|
|
+
|
|
+ BrowserMatch Windows gssapi-no-negotiate
|