[SSSD] Re: Cloud Kerberos

2024-02-16 Thread Alexander Bokovoy
On Чцв, 15 лют 2024, David L wrote: Depends on whether this machine is part of RHEL IdM environment or not. RHEL IdM can authenticate to Entra ID. This authentication process will obtain a Kerberos ticket from RHEL IdM realm. This has nothing to do with 'Cloud' Kerberos that Entra ID provides

[SSSD] Re: Cloud Kerberos

2024-02-15 Thread David L
> Depends on whether this machine is part of RHEL IdM environment or not. > RHEL IdM can authenticate to Entra ID. This authentication process will > obtain a Kerberos ticket from RHEL IdM realm. This has nothing to do > with 'Cloud' Kerberos that Entra ID provides but authorization would be >

[SSSD] Re: Cloud Kerberos

2024-02-14 Thread Alexander Bokovoy
On Срд, 14 лют 2024, David Mulder wrote: This part is not implemented. David Mulder (SUSE and Samba Team) is working on an implementation of that for Samba join to Entra ID, a draft merge request is available at https://gitlab.com/samba-team/samba/-/merge_requests/3394. This is far from being a

[SSSD] Re: Cloud Kerberos

2024-02-14 Thread David Mulder
> This part is not implemented. David Mulder (SUSE and Samba Team) is > working on an implementation of that for Samba join to Entra ID, a draft > merge request is available at > https://gitlab.com/samba-team/samba/-/merge_requests/3394. This is far > from being a usable code yet and retrieving a

[SSSD] Re: Cloud Kerberos

2024-02-14 Thread David Mulder
> No and no. > > There are independent bits and pieces of a bigger puzzle that need to be > worked on, they are done by different groups but altogether they > contribute to the same goal. Most of the specifications aren't > written yet or not documented publicly so regardless of the projects >

[SSSD] Re: Cloud Kerberos

2024-02-13 Thread Alexander Bokovoy
On Аўт, 13 лют 2024, David L wrote: I realized I have a couple more questions. For 'Cloud' Kerberos reference I assume you mean what Steve Syfuhs describes here: https://syfuhs.net/how-azure-ad-kerberos-works Yes. I think I'm using a newer name. For a little bit they called is Cloud

[SSSD] Re: Cloud Kerberos

2024-02-13 Thread David L
I realized I have a couple more questions. > For 'Cloud' Kerberos reference I assume you mean what Steve Syfuhs > describes here: https://syfuhs.net/how-azure-ad-kerberos-works Yes. I think I'm using a newer name. For a little bit they called is Cloud Business Kerberos too. > The way how

[SSSD] Re: Cloud Kerberos

2024-02-13 Thread David L
Thankyou! -- ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines:

[SSSD] Re: Cloud Kerberos

2024-02-13 Thread Alexander Bokovoy
On Пан, 12 лют 2024, David L wrote: Does SSSD work with Microsoft's newish Cloud Kerberos? If not, are there any plans to? It is not really SSSD task in itself, so yes and no and yes. :) For 'Cloud' Kerberos reference I assume you mean what Steve Syfuhs describes here: