[
https://issues.apache.org/jira/browse/SLIDER-1058?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Kai Zheng updated SLIDER-1058:
------------------------------
Description: Per discussions in SLIDER-1035: this would enhance Kdiag tool
allowing it to dump keytab file out so user may aware its content about
principals, key types, key versions and so on. This makes sense because even a
keytab can be used to authenticate successfully, but may be the wrong one. For
example, a service may use the wrong keytab to login and starts up
successfully, but when receives user's request, it maybe can't authenticate the
user even when the request is valid due to the mismatch key contained in the
keytab file. (was: This would enhance Kdiag tool allowing it to dump keytab
file out so user may aware its content about principals, key types, key
versions and so on. This makes sense because even a keytab can be used to
authenticate successfully, but may be the wrong one. For example, a service may
use the wrong keytab to login and starts up successfully, but when receives
user's request, it maybe can't authenticate the user even when the request is
valid due to the mismatch key contained in the keytab file.)
> Kdiag: dump keytab file out so user may aware its content
> ---------------------------------------------------------
>
> Key: SLIDER-1058
> URL: https://issues.apache.org/jira/browse/SLIDER-1058
> Project: Slider
> Issue Type: Improvement
> Reporter: Kai Zheng
>
> Per discussions in SLIDER-1035: this would enhance Kdiag tool allowing it to
> dump keytab file out so user may aware its content about principals, key
> types, key versions and so on. This makes sense because even a keytab can be
> used to authenticate successfully, but may be the wrong one. For example, a
> service may use the wrong keytab to login and starts up successfully, but
> when receives user's request, it maybe can't authenticate the user even when
> the request is valid due to the mismatch key contained in the keytab file.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
