diff --git a/manifests/vhost.pp b/manifests/vhost.pp
index b5604dd267..f2386dcd6c 100644
--- a/manifests/vhost.pp
+++ b/manifests/vhost.pp
@@ -1507,6 +1507,8 @@
 #           credstore => 'keytab:/foo/bar.keytab',
 #           localname => 'Off',
 #           sslonly   => 'On',
+#           negotiateonce => 'Off',
+#           basicauth => 'On',
 #         }
 #       },
 #     ],
diff --git a/templates/vhost/_gssapi.epp b/templates/vhost/_gssapi.epp
index 4f2d9f9114..dec2ac26a0 100644
--- a/templates/vhost/_gssapi.epp
+++ b/templates/vhost/_gssapi.epp
@@ -3,6 +3,9 @@
   Optional[String[1]]        $credstore = undef,
   Optional[Enum['On','Off']] $sslonly   = undef,
   Optional[Enum['On','Off']] $localname = undef,
+  Optional[Enum['On','Off']] $basicauth = undef,
+  Optional[Enum['On','Off']] $negotiateonce = undef,
+
 |%>
 # mod_auth_gssapi configuration
 <% if $sslonly { -%>
@@ -11,6 +14,12 @@
 <% if $localname { -%>
     GssapiLocalName <%= $localname %>
 <% } -%>
+<% if $negotiateonce { -%>
+    GssapiNegotiateOnce <%= $basicauth %>
+<% } -%>
+<% if $basicauth { -%>
+    GssapiLocalName <%= $basicauth %>
+<% } -%>
 <% if $credstore { -%>
     GssapiCredStore <%= $credstore %>
 <% } -%>