From cca2307bae362ac6e3b76b14c753d9c775b6d7fb Mon Sep 17 00:00:00 2001
From: Evan Broder <broder@mit.edu>
Date: Wed, 10 Dec 2008 23:21:24 -0500
Subject: [PATCH 1/1] config.{authn[0] => kerberos}.realm

svn path=/trunk/packages/invirt-web/; revision=1836
---
 code/main.py                               |    2 +-
 debian/changelog                           |    6 ++++++
 files/etc/apache2/sites-available/ssl.mako |    2 +-
 3 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/code/main.py b/code/main.py
index cffa809..8a5e001 100755
--- a/code/main.py
+++ b/code/main.py
@@ -681,7 +681,7 @@ def getUser(environ):
     
     if environ.get('AUTH_TYPE') == 'Negotiate':
         # Convert the krb5 principal into a krb4 username
-        if not user.endswith('@%s' % config.authn[0].realm):
+        if not user.endswith('@%s' % config.kerberos.realm):
             return
         else:
             return user.split('@')[0].replace('/', '.')
diff --git a/debian/changelog b/debian/changelog
index f8df205..216ed72 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,9 @@
+invirt-web (0.0.15) unstable; urgency=low
+
+  * config.{authn[0] => kerberos}.realm
+
+ --
+
 invirt-web (0.0.14) unstable; urgency=low
 
   * Depend on invirt-web-iptables
diff --git a/files/etc/apache2/sites-available/ssl.mako b/files/etc/apache2/sites-available/ssl.mako
index 9875db1..ec47ec3 100644
--- a/files/etc/apache2/sites-available/ssl.mako
+++ b/files/etc/apache2/sites-available/ssl.mako
@@ -75,7 +75,7 @@ ${caller.body()}
 		KrbMethodNegotiate on
 		KrbMethodK5Passwd off
 		KrbAuthoritative off
-		KrbAuthRealms ${cfg.authn[0].realm}
+		KrbAuthRealms ${cfg.kerberos.realm}
 		Krb5Keytab /etc/invirt/keytab
 		KrbSaveCredentials off
 	</%call>
-- 
1.7.9.5