PR#28: krb5: deploy, authenticate with, and manage a Kerberos 5 KDC -

c3i-library

#28 krb5: deploy, authenticate with, and manage a Kerberos 5 KDC

Merged Oct 29, 2019 by mikeb. Opened Oct 28, 2019 by mikeb.

mikeb/c3i-library kerberos into master

configure MBS for Kerberos authentication

Mike Bonnet • Oct 28, 2019

cef7031f2726b265bb81e2923917281a821a8cd2

krb5: deploy, authenticate with, and manage a Kerberos 5 KDC

Mike Bonnet • Oct 28, 2019

b92aef33ed30f898b748d9ab0bf6c332a4516080

Download 28.patch

mikeb commented Oct 28, 2019

The krb5 variable supports deploying a new containerized Kerberos 5 KDC (using the krb5-fedora image from https://pagure.io/krb5-fedora and quay.io/factory2/krb5-fedora). It provides methods for running admin commands (adding user and service principals), authenticating to the KDC, and running commands in an environment with a valid Kerberos ccache. It can be used to configure services for Kerberos authentication and validate their correct operation.

This change also updates the mbs variable to optionally configure a new MBS instance for Kerberos authentication.

mikeb commented Oct 28, 2019

@rayson @mkovarik Please take a look. It is being used by MBS changes on this branch which will be submitted once these changes are merged.

Edited Oct 28, 2019 by mikeb

rebased onto b92aef33ed30f898b748d9ab0bf6c332a4516080

Oct 28, 2019

mkovarik commented Oct 29, 2019

Looks good to me

Pull-Request has been merged by mikeb

Oct 29, 2019