Skip to content

Commit 2802d36

Browse files
committed
Update README.md, remove references to groups/users
1 parent 60f0811 commit 2802d36

File tree

1 file changed

+8
-8
lines changed

1 file changed

+8
-8
lines changed

README.md

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -52,26 +52,26 @@ thing.
5252
* `auth_gss_service_name`: service principal name to use when acquiring
5353
credentials.
5454

55-
If you would like to authorize only a specific set of users, you can use the
55+
If you would like to authorize only a specific set of principals, you can use the
5656
`auth_gss_authorized_principal` directive. The configuration syntax supports
5757
multiple entries, one per line.
5858

59-
auth_gss_authorized_principal <username>@<realm>
60-
auth_gss_authorized_principal <username2>@<realm>
59+
auth_gss_authorized_principal <primary1>@<realm>
60+
auth_gss_authorized_principal <primary2>@<realm>
6161

62-
Users can also be authorized using a regex pattern via the `auth_gss_authorized_principal_regex`
63-
directive. This directive can be used together with the `auth_gss_authorized_principal` directive.
62+
Principals can also be authorized using a regex pattern via the `auth_gss_authorized_principal_regex`
63+
directive. This directive can be used together with the `auth_gss_authorized_principal` directive.
6464

65-
auth_gss_authorized_principal <username>@<realm>
66-
auth_gss_authorized_principal_regex ^(<username>)/(<group>)@<realm>$
65+
auth_gss_authorized_principal <primary1>@<realm>
66+
auth_gss_authorized_principal_regex ^(<primary2>)/(<instance>)@<realm>$
6767

6868
The remote user header in nginx can only be set by doing basic authentication.
6969
Thus, this module sets a bogus basic auth header that will reach your backend
7070
application in order to set this header/nginx variable. The easiest way to disable
7171
this behavior is to add the following configuration to your location config.
7272

7373
proxy_set_header Authorization "";
74-
74+
7575
A future version of the module may make this behavior an option, but this should
7676
be a sufficient workaround for now.
7777

0 commit comments

Comments
 (0)