#SPNEGO(SPNEGO: Simple and Protected GSS-API Negotiation)配置
#SPNEGO由微软提供的一种使用GSS-API认证机制的安全协议，用于使Webserver共享Windows Credentials
#基于Kerberos或NTLMcredentials 的Active Directory credentials的单点登录实现
#SPNEGO的配置说明,请参考:http://spnego.sourceforge.net/

#当用户不存在时,自动创建用户的bean方法
framemax-security.autoCreateUserOnNotFound.beanMethod=fmxUserService#createUserByAccount
framemax-security.autoCreateUserOnNotFound.enabled=true

#true if Basic auth should be offered
spnego.allow.basic=true

#true if request from localhost should not be authenticated.
spnego.allow.localhost=true

#true if non-ssl for basic auth is allowed.
spnego.allow.unsecure.basic=true

#true if instead of err on ntlm token, prompt for username/pass.
spnego.prompt.ntlm=true

#true if server should support credential delegation requests
spnego.allow.delegation=false

#name of the client login module
spnego.login.client.module=spnego-client

#name of the server login module
spnego.login.server.module=spnego-server

# specify krb5 conf file as a System property
spnego.krb5.conf=krb5.conf

# specify login conf file as a System property
spnego.login.conf=login.conf

#domain account to use for pre-authentication
spnego.preauth.username=test

#password to domain account
spnego.preauth.password=test

#specify logging level
spnego.logger.level=1
