Integrating Kerberos with LDAP

2016-06-18 Thread Aneela Saleem
Hi, I'm new to Kerberos. I have configured it successfully. I can add principals and authenticate that principals well. Now i was to import users from LDAP. And there are some confusions regarding it. How the authentication would be managed in the case we want user management through LDAP and au

Re: Integrating Kerberos with LDAP

2016-06-20 Thread Aneela Saleem
What if i don't have configured pam, sssd, nss_ldap. Can i simulate LDAP users authentication? Means everytime a user is created in LDAP we manually add its principal in Kerberos. Is it fine to do this? On Sun, Jun 19, 2016 at 12:33 AM, Aneela Saleem wrote: > Thanks for the response. &g

Issue while make check

2016-06-21 Thread Aneela Saleem
Hi all, I have downloaded the latest MIT kerberos release 1.14.2. I can successfully *make* and *make install *but when i run *make check *i got following error: LD_LIBRARY_PATH=`echo -L../../../lib | sed -e "s/-L//g" -e "s/ /:/g"`; export LD_LIBRARY_PATH; KRB5_CONFIG=../../../config-files/krb5

Hadoop-Kerberos aunthentication flow

2016-07-12 Thread Aneela Saleem
Hi all, I have configured Kerberos with Hadoop. I'm facing difficulty in mapping the Kerberos architecture and whole flow of authentication to my application. Following is my usecase: We have a web application that calls backend services, which communicates with Hadoop ecosystem internally. Now i

Re: Hadoop-Kerberos aunthentication flow

2016-07-12 Thread Aneela Saleem
> > "Mirkar, Shahezad" writes: > > > Hi, > > > > It seems image is filtered can you send it again? > > > > Thanks and Regards, > > Shahezad Mirkar > > > > -Original Message----- > > From: kerberos-boun...@mit.edu [mai

Login usecase

2016-07-17 Thread Aneela Saleem
Hi all, If a user logs into any kerberized Application, using Krb5LoginModule, there is a function loginFromKeyTab. Client should have the key tab file to login to application. But I think this is very insecure way of login. Anyone who cloud access your key tab file then login to application. Is t

Re: Login usecase

2016-07-18 Thread Aneela Saleem
/17/16, 16:04, "kerberos-boun...@mit.edu on behalf of Aneela Saleem" < > kerberos-boun...@mit.edu on behalf of ane...@platalytics.com> wrote: > > Hi all, > > If a user logs into any kerberized Application, using Krb5LoginModule, > there is a function

Re: Login usecase

2016-07-18 Thread Aneela Saleem
henticate to Hadoop. > > > > *From: *Aneela Saleem > *Date: *Monday, July 18, 2016 at 11:13 > *To: *Brandon Allbery > *Cc: *"kerberos@mit.edu" > *Subject: *Re: Login usecase > > > > Thanks Brandon for your response. > > Actually, My use-case

Re: Login usecase

2016-07-18 Thread Aneela Saleem
you want to change the >>> web application to use SPNEGO to do Kerberos authentication with a user; >>> this gives you a credential that you can then use to authenticate to Hadoop. >>> >>> From: Aneela Saleem >> > >>> Date: Monday, July 18, 2016 at 1

Re: Login usecase

2016-07-19 Thread Aneela Saleem
eeper understanding of the > underlying kerberos concepts you need to understand in general is here: > > http://web.mit.edu/kerberos/krb5-latest/doc/ > > with some handy considerations to keep in mind here when creating apps > based on kerberos. > > http://web.mit.edu/kerbe