33
edits
Changes
From Pumping Station One
Systems/Services/Kerberos (view source)
Revision as of 22:20, 13 September 2020
, 22:20, 13 September 2020no edit summary
{{mbox |type=warning |text=This information is out of date. [[IT Infrastructure|Up-to-date IT information can be found here]] }}
= Kerberos =
= Kerberos =
== Apache SSO ==
== Apache SSO ==
Note: Replace 'rack' with host name of server.
Setting up the keytab:
Setting up the keytab:
Configure Auth:
Configure Auth:
<pre>
<pre>
<Location />
Authtype Kerberos
Authtype Kerberos
AuthName "AD.PUMPINGSTATIONONE.ORG"
AuthName "AD.PUMPINGSTATIONONE.ORG"
KrbMethodNegotiate on
KrbMethodNegotiate on
Require valid-user
Require valid-user
</Location>
</pre>
== SSH SSO ==
To enable kerberos SSO for your SSH client add the following lines to ~/.ssh/config
<pre>
GSSAPIAuthentication yes
GSSAPIDelegateCredentials yes
PreferredAuthentications gssapi-with-mic,publickey,keyboard-interactive,password
</pre>
</pre>
