From 703a06e6c370973e2f3c6694abddbdd380f0bf31 Mon Sep 17 00:00:00 2001

From: Robbie Harwood <rharwood@redhat.com>

Date: Thu, 19 Oct 2017 16:35:29 -0400

Subject: [PATCH] Document gssapi-no-negotiate

Adds new section for apache env vars.

(cherry picked from commit 5330fa4959ca9317bf5943decfaaf0bbe86f1853)

---

 README | 18 ++++++++++++++++++

 1 file changed, 18 insertions(+)

diff --git a/README b/README

index 1fdfe98..1393760 100644

--- a/README

+++ b/README

@@ -418,3 +418,21 @@ Note: The GSS_C_NT_HOSTBASED_SERVICE format is used for names (see example).

 #### Example

     GssapiAcceptorName HTTP@www.example.com

+Environment Variables

+---------------------

+

+(Note: these are not process environment variables, but rather Apache

+environment variables, as described

+[in the apache docs](https://httpd.apache.org/docs/2.4/env.html).)

+

+### gssapi-no-negotiate

+

+This environment variable is used to suppress setting Negotiate headers.  Not

+sending these headers is useful to work around browsers that do not handle

+them properly (and incorrectly show authentication popups to users).

+

+#### Example

+

+For instance, to suppress negotiation on Windows browsers, one could set:

+

+    BrowserMatch Windows gssapi-no-negotiate