#143 Add service/HTTP section to default gssproxy.conf
Closed: Fixed Opened by dpal.

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1208640

Description of problem:
When setting up GSS-Proxy to be used with Apache HTTP Server
   https://fedorahosted.org/gss-proxy/wiki/Apache
it is necessary to edit /etc/gssproxy/gssproxy.conf and prepend
[service/HTTP]
  mechs = krb5
  cred_store = keytab:/etc/gssproxy/http.keytab
  cred_store = ccache:/var/lib/gssproxy/clients/krb5cc_%U
  euid = 48
or similar block. This section has to be before any section which might have
allow_any_uid = yes, namely service/nfs-client. People sometimes get that
wrong.
It might be easier for users (admins) if that section was already there.
Its presence when no httpd is configured or running shouldn't harm.
Version-Release number of selected component (if applicable):
gssproxy-0.3.0-10.el7.x86_64
How reproducible:
Deterministic.
Steps to Reproduce:
1. Attempt to configure GSS-Proxy for use with Apache HTTP Server.
2. Check if you have to configure the service/HTTP section.
Actual results:
You have to do it, it's not in gssproxy.conf by default.
Expected results:
You don't have to do it, it's already there.
Additional info:

Patch submitted for review: https://pagure.io/gssproxy/pull-request/2

Review cancelled; upstream, this will wait on config file fragments and symbolic usernames support to aid portability.

This is still blocking on 122, but a preliminary review has been posted: https://pagure.io/gssproxy/pull-request/5

Pushed to master as e4a9474

Metadata Update from @dpal:
- Issue assigned to rharwood
- Issue set to the milestone: 2015 September

Metadata