Re: [openstack-dev] Kerberos in OpenStack

2015-03-02 Thread Adam Young
Posting response to the mailing list, as I suspect others have these questions. I understand that in the current proposed implementation only keystone runs on apache- httpd. * * *1. My question is that- is it possible to move Nova server on the apache-httpd server just like the way keyst

Re: [openstack-dev] Kerberos in OpenStack

2015-02-24 Thread Jamie Lennox
I replied to almost exactly this email off-list and so thought i would copy my reply to -dev. - Original Message - > From: "Jamie Lennox" > To: "Sanket Lawangare" > Sent: Wednesday, February 25, 2015 6:39:14 AM > Subject: Re: Kerberos in OpenStack > > > > - Original Message

Re: [openstack-dev] Kerberos in OpenStack

2015-02-24 Thread Sanket Lawangare
Thanks a lot for taking out time and replying back Tim. Will let you know if i have any further questions. On Tue, Feb 24, 2015 at 1:22 PM, Tim Bell wrote: > You may also get some information from how we set up Kerberos at CERN at > http://openstack-in-production.blogspot.fr/2014/10/kerberos-an

Re: [openstack-dev] Kerberos in OpenStack

2015-02-24 Thread Adam Young
On 02/24/2015 01:53 PM, Sanket Lawangare wrote: Hello Everyone, My name is Sanket Lawangare. I am a graduate Student studying at The University of Texas, at San Antonio.For my Master’s Thesis I am working on the Identity component of OpenStack. My research is to investigate external authenti

Re: [openstack-dev] Kerberos in OpenStack

2015-02-24 Thread Tim Bell
You may also get some information from how we set up Kerberos at CERN at http://openstack-in-production.blogspot.fr/2014/10/kerberos-and-single-sign-on-with.html From my understanding, the only connection is between Keystone and KDC. There is a standard Keystone token issues based off the Kerber