Difference between revisions of "Single sign-on"
| Line 44: | Line 44: | ||
Things to do, in rough order of priority: | Things to do, in rough order of priority: | ||
| − | |||
* Investigate MySQL/Kerberos integration | * Investigate MySQL/Kerberos integration | ||
| Line 51: | Line 50: | ||
Stuff that's done. Latest stuff on top. | Stuff that's done. Latest stuff on top. | ||
| + | * [[User:John|JE]] 2011-08-16: Integrated svn with Kerberos (via Apache) | ||
* [[User:John|JE]] 2011-08-15: Configured /home mounts for [[Hope_admin#John_2011-08-15_01:32|hope]] and [[Honesty_admin#John_2011-08-15_04:06|honesty]] to [[charity]]:/home | * [[User:John|JE]] 2011-08-15: Configured /home mounts for [[Hope_admin#John_2011-08-15_01:32|hope]] and [[Honesty_admin#John_2011-08-15_04:06|honesty]] to [[charity]]:/home | ||
* [[User:John|JE]] 2011-08-15: Configured SSH logins to use Kerberos/LDAP on [[Hope_admin#John_2011-08-14_17:23|hope]] and [[Honesty_admin#John_2011-08-15_03:45|honesty]] | * [[User:John|JE]] 2011-08-15: Configured SSH logins to use Kerberos/LDAP on [[Hope_admin#John_2011-08-14_17:23|hope]] and [[Honesty_admin#John_2011-08-15_03:45|honesty]] | ||
Revision as of 00:24, 17 August 2011
This is the ProgClub Single sign-on project. The idea is that users can login to our systems using a single username and password. For other projects see Projects.
Project status
Pretty much done. Kerberos has been configured on charity, which is the KDC. An NFS share for users' home directories has been configured on charity. Hope and honesty have been configured with an appropriate Kerberos/LDAP/PAM client configuration. There might be some other services that we can Kerberize though, definitely svn.
Contributors
Members who have contributed to this project. Newest on top.
Copyright
Copyright 2011, Contributors. Licensed under the New BSD license.
Links
- Kerberos
- Kerberos: The Network Authentication Protocol
- Designing an Authentication System
- OpenSSH & Kerberos
TODO
Things to do, in rough order of priority:
- Investigate MySQL/Kerberos integration
Done
Stuff that's done. Latest stuff on top.
- JE 2011-08-16: Integrated svn with Kerberos (via Apache)
- JE 2011-08-15: Configured /home mounts for hope and honesty to charity:/home
- JE 2011-08-15: Configured SSH logins to use Kerberos/LDAP on hope and honesty
- JE 2011-08-15: Configured /home NFS share on charity
- JE 2011-08-06: Installed OpenLDAP on charity
- JE 2011-08-04: Configured charity as the KDC
Kerberos
Ports for the KDC and Admin Services: The default ports used by Kerberos are port 88 for the KDC and port 749 for the admin server.
See Kerberos for ProgClub's Kerberos configuration.
