From 703a06e6c370973e2f3c6694abddbdd380f0bf31 Mon Sep 17 00:00:00 2001 From: Robbie Harwood Date: Thu, 19 Oct 2017 16:35:29 -0400 Subject: [PATCH] Document gssapi-no-negotiate Adds new section for apache env vars. (cherry picked from commit 5330fa4959ca9317bf5943decfaaf0bbe86f1853) --- README | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/README b/README index 1fdfe98..1393760 100644 --- a/README +++ b/README @@ -418,3 +418,21 @@ Note: The GSS_C_NT_HOSTBASED_SERVICE format is used for names (see example). #### Example GssapiAcceptorName HTTP@www.example.com +Environment Variables +--------------------- + +(Note: these are not process environment variables, but rather Apache +environment variables, as described +[in the apache docs](https://httpd.apache.org/docs/2.4/env.html).) + +### gssapi-no-negotiate + +This environment variable is used to suppress setting Negotiate headers. Not +sending these headers is useful to work around browsers that do not handle +them properly (and incorrectly show authentication popups to users). + +#### Example + +For instance, to suppress negotiation on Windows browsers, one could set: + + BrowserMatch Windows gssapi-no-negotiate