commit 84658012ee6cb084f2258ea6472448972bb67abb
author Filip Pytloun <filip@pytloun.cz> Wed Jan 27 14:05:39 2016 +0100
committer Filip Pytloun <filip@pytloun.cz> Wed Jan 27 14:05:40 2016 +0100
tree e477584d5b1cdaacaadd1bb59621ae2895f2a114
parent 70ff0f04043f92b5ad61d07638a228f6e5abdc46

Don't set constrained delegation

Not supported in Ubuntu trusty

apache/files/_auth.conf

diff --git a/apache/files/_auth.conf b/apache/files/_auth.conf
index d64de96..c7b6315 100644
--- a/apache/files/_auth.conf
+++ b/apache/files/_auth.conf
@@ -18,7 +18,7 @@
   KrbAuthRealms {{ site.auth.kerberos.realms|join(' ') }}
   Krb5KeyTab {{ site.auth.kerberos.get("keytab", "/etc/apache2/ipa.keytab") }}
   KrbSaveCredentials on
-  KrbConstrainedDelegation on
+  #KrbConstrainedDelegation on
 
   # Ensure X-Forwarded-User is correctly set
   RequestHeader unset X-Forwarded-User