Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1208640
Description of problem: When setting up GSS-Proxy to be used with Apache HTTP Server https://fedorahosted.org/gss-proxy/wiki/Apache it is necessary to edit /etc/gssproxy/gssproxy.conf and prepend [service/HTTP] mechs = krb5 cred_store = keytab:/etc/gssproxy/http.keytab cred_store = ccache:/var/lib/gssproxy/clients/krb5cc_%U euid = 48 or similar block. This section has to be before any section which might have allow_any_uid = yes, namely service/nfs-client. People sometimes get that wrong. It might be easier for users (admins) if that section was already there. Its presence when no httpd is configured or running shouldn't harm. Version-Release number of selected component (if applicable): gssproxy-0.3.0-10.el7.x86_64 How reproducible: Deterministic. Steps to Reproduce: 1. Attempt to configure GSS-Proxy for use with Apache HTTP Server. 2. Check if you have to configure the service/HTTP section. Actual results: You have to do it, it's not in gssproxy.conf by default. Expected results: You don't have to do it, it's already there. Additional info:
Patch submitted for review: https://pagure.io/gssproxy/pull-request/2
Review cancelled; upstream, this will wait on config file fragments and symbolic usernames support to aid portability.
This is still blocking on 122, but a preliminary review has been posted: https://pagure.io/gssproxy/pull-request/5
Pushed to master as e4a9474
Metadata Update from @dpal: - Issue assigned to rharwood - Issue set to the milestone: 2015 September