        <Location />
        AuthType Kerberos
        AuthName "Kerberos Login"
        KrbMethodNegotiate On
        KrbMethodK5Passwd On
        KrbAuthRealms DHS.STATE.IA.US
        Krb5KeyTab /usr/local/apache2/conf/HTTPinternal-icar.keytab
        require valid-user 
        RewriteEngine On
        RewriteCond %{LA-U:REMOTE_USER} (.+)
        RewriteRule . - [E=RU:%1]
        RequestHeader set X-Forwarded-User %{RU}e
        </Location> 
        ProxyPass       /       http://jdhsicar/