Vhosts file update  [SOLVED]

General discussions around KeyHelp.
Post Reply
User avatar
boka003
Posts: 48
Joined: Fri 7. Jan 2022, 10:17

Vhosts file update

Post by boka003 »

Hello there,

We have installed LDAP Kerberos on our website.
To archive this, we have updated /etc/apache2/keyhelp/vhosts/boris.conf file.
https://plugins.miniorange.com/guide-to ... sso#step-1


Now, every time we change something related to the domain in keyhelp, we lose our custom settings.

This is a line that we add:
<Directory "/home/users/boris/www/">
# Require all granted
Require valid-user
Options SymLinksIfOwnerMatch
AuthType Kerberos
AuthName "Kerberos auth"
KrbServiceName HTTP/domain.int@domain.INT
Krb5Keytab /etc/krb5.keytab
BrowserMatch Windows gssapi-no-negotiate
BrowserMatch Chrome gssapi-no-negotiate
KrbMethodNegotiate on
KrbMethodK5Passwd on
#GssapiAllowedMech krb5
#GssapiBasicAuth On
#GssapiCredStore keytab:/etc/krb5.keytab
#GssapiLocalName On
#BrowserMatch Windows gssapi-no-negotiate
</Directory>


Can we somehow keep this line it the file, even if I made some domain-related changes?


Regards
User avatar
Alexander
Keyweb AG
Posts: 3979
Joined: Wed 20. Jan 2016, 02:23

Re: Vhosts file update  [SOLVED]

Post by Alexander »

Hello,

Of course, the relevant configuration files needs to be updated when changes are triggered within the UI.


1) An update proof method can be found here:
KeyHelp Admin Area -> Domains -> Select the domain you want to update and click on Edit -> Tab 'Apache settings'


2) Alternatively, set the file read-only with the "chattr +i" command (generally a rather bad idea - not recommended)
Mit freundlichen Grüßen / Best regards
Alexander Mahr

**************************************************************
Keyweb AG - Die Hosting Marke
Neuwerkstr. 45/46, 99084 Erfurt / Germany
http://www.keyweb.de - http://www.keyhelp.de
**************************************************************
Post Reply