Options +ExecCGI
AddHandler wsgi-script .py
RewriteEngine On
DirectoryIndex index.py

RewriteCond %{REQUEST_URI} /\.svn/
RewriteRule . - [F]
<Files ~ "^\.">
	Order allow,deny
	Deny from all
</Files>
<Files ~ "^config.py">
	Order allow,deny
	Deny from all
</Files>
<Files ~ "^\.\.?$">
	Order allow,deny
	Allow from all
</Files>

#AuthLDAPBindDN "<ADMINISTRATOR's DN>"
#AuthLDAPBindPassword "<PASSWORD>"
#AuthLDAPURL "ldap://<SERVER-ADDRESS>:3268/?sAMAccountName?sub"
#AuthType Basic
#AuthName "<AUTH-NAME>"
#AuthBasicProvider ldap
#AuthUserFile /dev/null
AuthName "Kerberos Login"
AuthType Kerberos
Krb5Keytab /path/to/krb/keytab
KrbAuthRealm <REALM>
KrbMethodNegotiate off
KrbSaveCredentials off
KrbVerifyKDC off

Require valid-user