On Mon, 12 Dec 2016 16:36:24 +0000
Dave Love <d.l...@liverpool.ac.uk> wrote:

> Dennis Gilmore <den...@ausil.us> writes:
> 
> > See the general kerberos information at: 
> > https://fedoraproject.org/wiki/Infrastructure_kerberos_authentication
> > for more details.  
> 
> I was going to try to authenticate, even if the tools won't work, but
> that's missing the fundamental information about how to configure the
> realm for clients.  What are the kdc(s) and admin_server (if
> admin_server is relevant)?

fedora-packager-0.6.0 includes:

/etc/krb5.conf.d/fedoraproject_org
and
/etc/krb5.conf.d/stg_fedoraproject_org

which contain: 

[realms]
 FEDORAPROJECT.ORG = {
        kdc = https://id.fedoraproject.org/KdcProxy
 }
[domain_realm]
 .fedoraproject.org = FEDORAPROJECT.ORG
 fedoraproject.org = FEDORAPROJECT.ORG

and

[realms]
 STG.FEDORAPROJECT.ORG = {
        kdc = https://id.stg.fedoraproject.org/KdcProxy
 }
[domain_realm]
 .stg.fedoraproject.org = STG.FEDORAPROJECT.ORG
 stg.fedoraproject.org = STG.FEDORAPROJECT.ORG

That said, autodetect should also work, so you shouldn't actually need
those I don't think. 

kevin

Attachment: pgpUZVyXJOOqE.pgp
Description: OpenPGP digital signature

_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Reply via email to