On Fri, 5 Oct 2012, Troy Benjegerdes wrote:
Would it be feasible for us to 'eat our own dogfood', so to speak, and use SPNEGO and cross-realm Kerberos to log into RT? (If this is already implemented, and I haven't noticed, then I will volunteer myself to go document it better)
That's not really "our (AFS's) own dogfood", more of a general Kerberos dogfood. That said, MIT's help.mit.edu RT installation does allow login using SPNEGO (through a shibboleth provider); I don't know how much customization was required for that integration, though. Given that RT is run by central.org, not OpenAFS, I don't think it's reasonable to ask the RT administrators to undertake a significant configuration change just for some tangential sense of dogfooding.
-Ben _______________________________________________ OpenAFS-devel mailing list OpenAFS-devel@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-devel