Re: S4U2self/S4U2Proxy question

2015-04-05 Thread Rick van Rein
Hello Praveen, > We have a hadoop cluster that uses MIT Kerberos for perimeter security. The Kerberos principles are stored in Oracle database which is the backend for KDC. > Does this mean that without changing my backend to LDAP I cannot use S4U features. I don't know about an Oracle backend, b

Re: S4U2self/S4U2Proxy question

2015-04-05 Thread Rick van Rein
Hello Praveen, The following information says it is expired, http://k5wiki.kerberos.org/wiki/Projects/Services4User and points to, http://k5wiki.kerberos.org/wiki/Projects/ConstrainedDelegation which states "This project was completed in release 1.8." Further below, it says: "We provide a CHE

Re: S4U2self/S4U2Proxy question

2015-04-04 Thread Praveen Pattanshetti
can someone please help me with the answer to the below email. Thanks, Praveen On Tuesday, March 31, 2015, Praveen Pattanshetti < praveen.pattanshetti...@gmail.com> wrote: > Does S4U functionality only work with AD or can we use this feature even > when KDC backend is database? > > If it works w