[ovirt-users] kerberos and AAA

[cmc]

Thanks Rafael. I forgot to mention that this is an AD host, which just uses
kerberos keytabs to establish trust, so it looks like the best option is to
install krb5 tools and sssd.

Cheers,

Cam

On Mon, Sep 26, 2016 at 5:09 PM, Rafael Martins <rmartins at redhat.com> wrote:

> ----- Original Message -----
> > From: "cmc" <iucounu at gmail.com>
> > To: "users" <users at ovirt.org>
> > Sent: Monday, September 26, 2016 6:04:05 PM
> > Subject: [ovirt-users] kerberos and AAA
> >
> > Hi,
> >
> > I've installed the LDAP AAA module for oVirt on the engine host, but I
> > suspect I also need to bind the host to the domain first as I am getting
> > 'peer not authenticated' when I try the auth. Is it ok to install sssd
> and
> > the kerberos tools without on the engine host manually? I know that in
> > general you should avoid installing things manually so wanted to check
> > first.
>
> If you have access to the LDAP server you can just create the keys there
> and transfer to the engine host, or just install the tools in engine host
> and bind. It is not supposed to produce issues.
>
> Rafael
>
> > Thanks,
> >
> > Cam
> >
> > _______________________________________________
> > Users mailing list
> > Users at ovirt.org
> > http://lists.ovirt.org/mailman/listinfo/users
> >
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/users/attachments/20160926/ab8fc210/attachment-0001.html>