AuthType Kerberos AuthName "Trac Authorization" KrbMethodNegotiate On KrbMethodK5Passwd On KrbAuthRealm DOMAIN.COM KrbServiceName HTTP/host.domain.com@DOMAIN.COM Krb5Keytab /etc/krb5.keytab MapUsernameRule (.*)@(.*) "$1" AuthLDAPBindDN "CN=HOST AD Authentication,OU=Service accounts,DC=domain,DC=com" AuthLDAPBindPassword "password" AuthLDAPUrl "ldap://server.domain.com:389/OU=User accounts,DC=domain,DC=com?sAMAccountName?sub?(objectClass=*)" NONE Require valid-user