From f71146685d77aeb2aa50668be4e7ab1640b94f03 Mon Sep 17 00:00:00 2001
From: Janos SUTO <sj@acts.hu>
Date: Thu, 1 Apr 2021 06:29:43 +0200
Subject: [PATCH] Added readme to gss_api sso auth

Signed-off-by: Janos SUTO <sj@acts.hu>
---
 webui/.htaccess | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/webui/.htaccess b/webui/.htaccess
index 78befb2b..3eca534e 100644
--- a/webui/.htaccess
+++ b/webui/.htaccess
@@ -36,6 +36,15 @@ RewriteRule ^view/javascript/piler.js /js.php [QSA,L]
 </IfModule>
 
 <IfModule auth_gssapi_module>
+   # ktpass -princ HTTP/<webserver-fqdn>@<WINDOWS AD DOMAIN IN CAPITALS> \
+   #        -mapuser <ldap helper user>@<WINDOWS AD DOMAIN IN CAPITALS> \
+   #        -pass * \
+   #        -crypto AES256-SHA1 \
+   #        -ptype KRB5_NT_PRINCIPAL \
+   #        -out /etc/krb5/http.keytab \
+   #
+   # setspn -s HTTP/<webserver-fqdn> <ldap helper user>
+
    <FilesMatch "sso\.php$">
       RewriteEngine on
       RewriteCond %{HTTP:Authorization}  !^$