Stanford Webauth/Webkdc/WebauthLDAP Ebuild/files to follow
Created attachment 85392 [details] Functional but hackish ebuild
Created attachment 85393 [details, diff] Patch to prevent make install from attempting to invoke apxs2
*** Bug 130912 has been marked as a duplicate of this bug. ***
Created attachment 85394 [details] mod_webkdc configuration
Created attachment 85395 [details] mod_webauth configuration
Created attachment 85396 [details] mod_webauthldap configuration
Created attachment 85397 [details] webkdc.conf with everything commented out This is for handling REMOTE_USER and so forth with mod_auth_kerb or another Apache auth source. A useful thing to do with Webauth, and the only way to do SPNEGO passwordless auth.
Comment on attachment 85397 [details] webkdc.conf with everything commented out >#our $KEYRING_PATH = "/etc/webkdc/keyring"; >#our $URL = "https://server.example.com/webkdc-service/"; >#our $HONOR_REMOTE_USER = 1; >#our $REMUSER_EXPIRES = 60 * 60 * 8; >#our $REALM = 'EXAMPLE.COM';
>LICENSE="GPLv3" There is no such thing as a GPLv3 (yet). The correct license would be the one at http://webauth.stanford.edu/download.html#license
Bryan, please don't use the edit attachment feature. It doesn't do what you think it does. Attach a new one and mark the previous as obsolete.
splendid indeed ... thought I would search b4 i post a request for one .. cant wait to test it .. thanks folks!
Created attachment 85443 [details] Also install the WebKDC scripts License also corrected, and einfo expanded. I hope this is simple enough to set up... If only there were some way to help with the Kerberos stuff w/o being overly automatic...
webapps don't in general maintain apache modules, which is the primary part of this. Couple more notes: - this ebuild needs to be rewritten for apache-2 only - the webapp part needs to use webapp.eclass (with WEBAPP_MANUAL_SLOT most likely, this doesn't make sense per-vhost). http://www.gentoo.org/proj/en/webapps/webapp-eclass.xml Feel free to reopen with an updated ebuild, and we'll have a look again. Thanks.