When thinking about gateways and what Ipsilon may do, I came across this thesis:
His approach to unifying web and non-web technologies was to build gateways for
non-web services such that browser based clients could be written without
changing the server side.
I'm not sold on that approach. However, the source repository includes a
gateway to a KDC. Users can kinit from the browser the way Kerberos intended
(password does not go over the wire).
users don't have to pop out to the command line to kinit? One still would not
have the ability to ssh into a console after doing an in-browser kinit, but all
the websites in the target domain should recognize the credentials.
Worthwhile or dumb?
This electronic message contains information generated by the USDA solely for
the intended recipients. Any unauthorized interception of this message or the
use or disclosure of the information it contains may violate the law and
subject the violator to civil or criminal penalties. If you believe you have
received this message in error, please notify the sender and delete the email
Freeipa-users mailing list