Documentation revision

[AlexElizard]

Examples of using nginx and kerberos for single-domain and multi-domain authentication were not presented.
I have shown examples in this question.

It should also be noted that auth_gss_allow_basic_fallback off does not work in browsers based on Chromium engines due to the way the Authentication: Negotiate header is handled.

Work tested on nginx 1.18.0, MIT KRB5 v1.12

Unfortunately, I can't think of how to put this in the documentation, so I didn't make a pull request.

[chaisacchu]

@AlexElizard We are planning for SSO against Active Directory so planning to use spnego with kerboros on nginx. Could you please provide me if any article on creating keytab file and configuration with example.

[AlexElizard]

@chaisacchu
I have not been involved in setting up AD, but our sysadmin used this article.
Here you can see the kerberos and nginx settings for the backend.
The question contains settings for single-domain authentication.
In the accepted answer for multi-domain authentication