Jira (PUP-4014) Add PKINIT support to Puppet CA

[Michael Weiser (JIRA)]

Title: Message Title

Michael Weiser commented on PUP-4014   Re: Add PKINIT support to Puppet CA One thing I perhaps failed to point out clearly and that does indeed apply to Puppet directly: With those PKINIT-enabled certificates on the machine, the agent, every piece of Puppet code and all the system's software is able to access kerberised services. Just one call to kinit that doesn't require a password or keytab will get them a ticket they can use to access kerberised services. With a small cron job, that ticket could be perpetually up to date and access to stuff like NFSv4 a no-brainer. I think that would open up whole new ways of deploying puppet itself and systems using puppet. Add Comment   This message was sent by Atlassian JIRA (v6.3.10#6340-sha1:7ea293a) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.