From 46938f1b0793b43ad470021708276d083f96f6cc Mon Sep 17 00:00:00 2001
From: Timo Makinen <tmakinen@foo.sh>
Date: Fri, 10 Apr 2015 13:54:21 +0300
Subject: [PATCH] apache: Allow setting service name for kerberos
 authentication.

---
 apache/manifests/init.pp            | 2 +-
 apache/templates/auth_kerb.conf.erb | 3 +++
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/apache/manifests/init.pp b/apache/manifests/init.pp
index 1742213..e400d29 100644
--- a/apache/manifests/init.pp
+++ b/apache/manifests/init.pp
@@ -493,7 +493,7 @@ class apache::proxy($port="8080",
 
 # Install mod_auth_kerb.
 #
-class apache::mod::auth_kerb {
+class apache::mod::auth_kerb($servicename=undef) {
 
     package { "mod_auth_kerb":
         ensure  => installed,
diff --git a/apache/templates/auth_kerb.conf.erb b/apache/templates/auth_kerb.conf.erb
index 8f85394..12f61d1 100644
--- a/apache/templates/auth_kerb.conf.erb
+++ b/apache/templates/auth_kerb.conf.erb
@@ -18,6 +18,9 @@ Krb5KeyTab /etc/httpd/conf/httpsd.keytab
 KrbMethodNegotiate On
 KrbAuthoritative On
 KrbMethodK5Passwd On
+<% if @servicename -%>
+KrbServiceName <%= @servicename %>
+<% end -%>
 
 #<Location /private>
 #  SSLRequireSSL