On Mon, Jan 2, 2017 at 11:27 PM, Orion Poplawski <orion(a)cora.nwra.com> wrote:
On 12/11/2016 05:34 PM, Dennis Gilmore wrote:
> * koji and the source lookaside were changed to use kerberos
> authentication
> instead of ssl certificates. All maintainers will need to:
>
> kinit YOUR-FAS-ACCOUNTNAME(a)FEDORAAPROJECT.ORG
>
> to get a valid kerberos TGT and be able to authenticate to koji and
> the lookaside upload cgi.
KDE users may find this useful - I've started using the newly packaged
kwalletcli to do:
Cool, would be nice add it into wiki:
https://fedoraproject.org/wiki/Infrastructure/Kerberos
$ cat ~/.kde/Autostart/kinit.desktop
[Desktop Entry]
Comment[en_US]=
Comment=
Exec=bash -c 'kwalletcli -f Passwords -e orion(a)FEDORAPROJECT.ORG | kinit
orion(a)FEDORAPROJECT.ORG;kswitch -p my(a)DOMAIN.COM'
GenericName[en_US]=Initialize Fedora Kerberos
GenericName=Initialize Fedora Kerberos
MimeType=
Name[en_US]=kinit
Name=kinit
Path=
StartupNotify=false
Terminal=false
TerminalOptions=
Type=Application
X-DBUS-ServiceName=
X-DBUS-StartupType=
X-KDE-SubstituteUID=false
X-KDE-Username=
name[en_US]=Kinit
After storing the password in the wallet's "Passwords" directory under my
principal name.
I find that I have to also kswitch back to my local principal for NFS to work
for me at work.
--
Orion Poplawski
Technical Manager 720-772-5637
NWRA, Boulder/CoRA Office FAX: 303-415-9702
3380 Mitchell Lane orion(a)nwra.com
Boulder, CO 80301
http://www.nwra.com
_______________________________________________
devel mailing list -- devel(a)lists.fedoraproject.org
To unsubscribe send an email to devel-leave(a)lists.fedoraproject.org
--
-Igor Gnatenko