Interesting so does that mean it can support GSSAPI authentication from the browser like the apache modules?<br><br><span style="font-family:Prelude, Verdana, san-serif;"><br><br></span><span id="signature"><div style="font-family: arial, sans-serif; font-size: 12px;color: #999999;">-- Sent from my HP Pre3</div><br></span><span style="color:navy; font-family:Prelude, Verdana, san-serif; "><hr align="left" style="width:75%">On Sep 10, 2014 7:32 PM, William Law <wlaw@stanford.edu> wrote: <br><br></span>Cool - I'll start looking at that now.
<br>
<br>Regards,
<br>
<br>Will
<br>
<br>On Sep 10, 2014, at 4:28 PM, Yair Zaslavsky <yzaslavs@redhat.com> wrote:
<br>
<br>>
<br>>
<br>> ----- Original Message -----
<br>>> From: "William Law" <wlaw@stanford.edu>
<br>>> To: "Yair Zaslavsky" <yzaslavs@redhat.com>
<br>>> Cc: "users" <users@ovirt.org>
<br>>> Sent: Thursday, September 11, 2014 2:11:08 AM
<br>>> Subject: Re: [ovirt-users] adding machine to openldap + kerberos with a keytab
<br>>>
<br>>> OK, thanks. Is there a way to perform it without manage-domains currently or
<br>>> in 3.5?
<br>>
<br>> in 3.5 - you can add new authn (authentication) and authz (authorization) providers by using configuration files.
<br>>
<br>>>
<br>>> Regards,
<br>>>
<br>>> Will
<br>>>
<br>>> On Sep 10, 2014, at 4:07 PM, Yair Zaslavsky <yzaslavs@redhat.com> wrote:
<br>>>
<br>>>>
<br>>>>
<br>>>> ----- Original Message -----
<br>>>>> From: "William Law" <wlaw@stanford.edu>
<br>>>>> To: "users" <users@ovirt.org>
<br>>>>> Sent: Thursday, September 11, 2014 1:53:04 AM
<br>>>>> Subject: [ovirt-users] adding machine to openldap + kerberos with a keytab
<br>>>>>
<br>>>>> Hi,
<br>>>>>
<br>>>>> When I try to use engine-manage-domains it seems to expect an account to
<br>>>>> sign
<br>>>>> in with. Is there any way to use a key tab? It seems like it does all
<br>>>>> this
<br>>>>> under the surface eventually; I'd just like to do it up front.
<br>>>>>
<br>>>>> Even a pointer to "manual" adding instructions would be very helpful.
<br>>>>>
<br>>>>> Thanks,
<br>>>>>
<br>>>>> Will
<br>>>>
<br>>>> Hi Will,
<br>>>> No way to perform this with manage domains at the moment.
<br>>>>
<br>>>> Not sure if we will invest in this, as in oVirt 3.5 we introduce a
<br>>>> pluggable architecture for AAA, based on extensions + configuration files
<br>>>> managed-domains should be used to support existing setups that will undergo
<br>>>> upgrade to 3.5 (or of course, will remain in their current versions).
<br>>>>
<br>>>>> _______________________________________________
<br>>>>> Users mailing list
<br>>>>> Users@ovirt.org
<br>>>>> http://lists.ovirt.org/mailman/listinfo/users
<br>>>>>
<br>>>
<br>>>
<br>>>
<br>
<br>
<br>_______________________________________________
<br>Users mailing list
<br>Users@ovirt.org
<br>http://lists.ovirt.org/mailman/listinfo/users
<br>