Anton Semjonov writes:
>>> It's much simpler to use a keytab for your service and let Kerberos
>>> acquire a TGT automatically. You can either place the keytab in a
>>> special location, set the env var KRB5_CLIENT_KTNAME or use GSSProxy to
>>> handle the keytab for you. With a client keytab, you
>> It's much simpler to use a keytab for your service and let Kerberos
>> acquire a TGT automatically. You can either place the keytab in a
>> special location, set the env var KRB5_CLIENT_KTNAME or use GSSProxy to
>> handle the keytab for you. With a client keytab, you don't have to call
>> kinit
On Thu, Jul 27, 2017 at 02:42:50PM +0200, Christian Heimes via FreeIPA-users
wrote:
On 2017-07-27 12:17, Darac Marjal via FreeIPA-users wrote:
Hi all,
I'm fairly new to FreeIPA, but I'm using it to sort out single-sign-on
on a few computers on my small network.
So far, I've managed to setup u
On 2017-07-27 12:17, Darac Marjal via FreeIPA-users wrote:
> Hi all,
>
> I'm fairly new to FreeIPA, but I'm using it to sort out single-sign-on
> on a few computers on my small network.
>
> So far, I've managed to setup up automounting of krb5i-protected shares
> on my NAS. I can see that, when I