[Freeipa-devel] [PATCH] ticket forwarding and TurboGears

[Nalin Dahyabhai]

On Thu, Sep 13, 2007 at 02:24:17PM -0400, Rob Crittenden wrote:
> With TurboGears I'm using mod_proxy to forward the requests after 
> authentication. What I do is grab a copy of the environment variables 
> REMOTE_USER and KRB5CCNAME and include those as request headers to 
> TurboGears. TG then can identify the principle and the location of that 
> users keytab.

I can't comment on the rest (not enough familiarity with it), but what
you're calling a keytab here is actually a credential cache -- a keytab
file is something rather different, and the use of the terms here
confused the heck out of me.

Cheers,

Nalin