Add info on how to use i_use_mode_kerberos

This commit is contained in:
Andrew Ruthven 2024-04-14 23:12:40 +12:00
parent 781ecff224
commit 2ce32a3ac7

View File

@ -827,6 +827,25 @@ $c->admin_email = 'calendar-admin@example.com';
//
// include('drivers_ldap.php');
// /* Kerberus configuration
// *
// * You may want your webserver to perform Kerberos SSO, in which case
// * REMOTE_USER should be trusted. If that is the case, then set
// * 'i_use_mode_kerberos' there are two options, neither are the default:
// *
// * * 'i_know_what_i_am_doing' means to trust REMOTE_USER, do not try and
// * authenticate to LDAP
// * * 'allow_fallback_to_ldap_auth' means to trust REMOTE_USER, but if
// * it isn't present, try and authenticate to LDAP. This allows using
// * Kerberos for SSO, but still allows non-Kerberos supporting clients
// * to still use username/password login.
// *
// * If either are set, then we still get details from LDAP for the user.
// *
// * Either include this in the above authenticate_hook config setting,
// * or use: */
//
// $c->authenticate_hook['config']['i_use_mode_kerberos'] = '';
/********************************/
/****** PAM and IMAP hooks ******/