From 518115123fd7316ea804d9dfa741e486c6aeaff2 Mon Sep 17 00:00:00 2001
From: Robbie Harwood (frozencemetery) <rharwood@redhat.com>
Date: Aug 19 2015 16:28:06 +0000
Subject: Define HTTP service by default in conf


This is a common use case, so we should have it by default.  It's also
somewhat tricky to put in the correct location in the config file due to
nfs-client's `allow_any_uid = yes`.

Ticket: https://fedorahosted.org/gss-proxy/ticket/143
Signed-off-by: Robbie Harwood (frozencemetery) <rharwood@redhat.com>

---

diff --git a/proxy/examples/gssproxy.conf.in b/proxy/examples/gssproxy.conf.in
index 321a4e7..5dd708b 100644
--- a/proxy/examples/gssproxy.conf.in
+++ b/proxy/examples/gssproxy.conf.in
@@ -1,5 +1,11 @@
 [gssproxy]
 
+[service/HTTP]
+  mechs = krb5
+  cred_store = keytab:/etc/gssproxy/http.keytab
+  cred_store = ccache:/var/lib/gssproxy/clients/krb5cc_%U
+  euid = 48
+
 [service/nfs-server]
   mechs = krb5
   socket = /run/gssproxy.sock