
--Alternative_=_Boundary_=_1410392894 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Interesting so does that mean it can support GSSAPI authentication from the= browser like the apache modules?<br><br><span style=3D"font-family:Prelude= , Verdana, san-serif;"><br><br></span><span id=3D"signature"><div style=3D"= font-family: arial, sans-serif; font-size: 12px;color: #999999;">-- Sent fr= om my HP Pre3</div><br></span><span style=3D"color:navy; font-family:Prelud= e, Verdana, san-serif; "><hr align=3D"left" style=3D"width:75%">On Sep 10, = 2014 7:32 PM, William Law <wlaw@stanford.edu> wrote: <br><br></span>C= ool - I'll start looking at that now. =0D<br>=0D<br>Regards,=0D<br>=0D<br>W= ill=0D<br>=0D<br>On Sep 10, 2014, at 4:28 PM, Yair Zaslavsky <yzaslavs@r= edhat.com> wrote:=0D<br>=0D<br>> =0D<br>> =0D<br>> ----- Origin= al Message -----=0D<br>>> From: "William Law" <wlaw@stanford.edu&g= t;=0D<br>>> To: "Yair Zaslavsky" <yzaslavs@redhat.com>=0D<br>&g= t;> Cc: "users" <users@ovirt.org>=0D<br>>> Sent: Thursday, S= eptember 11, 2014 2:11:08 AM=0D<br>>> Subject: Re: [ovirt-users] addi= ng machine to openldap + kerberos with a keytab=0D<br>>> =0D<br>>&= gt; OK, thanks. Is there a way to perform it without manage-domains curren= tly or=0D<br>>> in 3.5?=0D<br>> =0D<br>> in 3.5 - you can add = new authn (authentication) and authz (authorization) providers by using con= figuration files.=0D<br>> =0D<br>>> =0D<br>>> Regards,=0D<br=
>> =0D<br>>> Will=0D<br>>> =0D<br>>> On Sep 10, 20= 14, at 4:07 PM, Yair Zaslavsky <yzaslavs@redhat.com> wrote:=0D<br>>= ;> =0D<br>>>> =0D<br>>>> =0D<br>>>> ----- Ori= ginal Message -----=0D<br>>>>> From: "William Law" <wlaw@sta= nford.edu>=0D<br>>>>> To: "users" <users@ovirt.org>=0D= <br>>>>> Sent: Thursday, September 11, 2014 1:53:04 AM=0D<br>&g= t;>>> Subject: [ovirt-users] adding machine to openldap + kerberos= with a keytab=0D<br>>>>> =0D<br>>>>> Hi,=0D<br>>= ;>>> =0D<br>>>>> When I try to use engine-manage-domai= ns it seems to expect an account to=0D<br>>>>> sign=0D<br>>&= gt;>> in with. Is there any way to use a key tab? It seems like it = does all=0D<br>>>>> this=0D<br>>>>> under the surfa= ce eventually; I'd just like to do it up front.=0D<br>>>>> =0D<= br>>>>> Even a pointer to "manual" adding instructions would be= very helpful.=0D<br>>>>> =0D<br>>>>> Thanks,=0D<br= >>>> =0D<br>>>>> Will=0D<br>>>> =0D<br>&g= t;>> Hi Will,=0D<br>>>> No way to perform this with manage d= omains at the moment.=0D<br>>>> =0D<br>>>> Not sure if we= will invest in this, as in oVirt 3.5 we introduce a=0D<br>>>> plu= ggable architecture for AAA, based on extensions + configuration files=0D<b= r>>>> managed-domains should be used to support existing setups th= at will undergo=0D<br>>>> upgrade to 3.5 (or of course, will remai= n in their current versions).=0D<br>>>> =0D<br>>>>> __= _____________________________________________=0D<br>>>>> Users = mailing list=0D<br>>>>> Users@ovirt.org=0D<br>>>>> = http://lists.ovirt.org/mailman/listinfo/users=0D<br>>>>> =0D<br= >> =0D<br>>> =0D<br>>> =0D<br>=0D<br>=0D<br>____________= ___________________________________=0D<br>Users mailing list=0D<br>Users@ov= irt.org=0D<br>http://lists.ovirt.org/mailman/listinfo/users=0D<br> --Alternative_=_Boundary_=_1410392894--