Hello,
We have an application that does some data processing on our NFS server. Users typically just ssh into a box which then has a kerberos key generated for them, which allows them access the NFS share and run the script.
We are wanting to set this up in a more automated fashion. Such as running the script in the background as a service. However, after a few days the kerberos keys become invalid killing access to the NFS share and the data.
Is there a way to generate some account/keys that will have permanent access for service level stuff like this?
-Kevin
Hi, Check this, it is already installed on your rhel/centos server, and works great with ipa. ( in fact the lead dev is also a dev on ipa ) https://pagure.io/gssproxy
Rob
Op do 8 okt. 2020 om 18:20 schreef Kevin Vasko via FreeIPA-users < freeipa-users@lists.fedorahosted.org>:
Hello,
We have an application that does some data processing on our NFS server. Users typically just ssh into a box which then has a kerberos key generated for them, which allows them access the NFS share and run the script.
We are wanting to set this up in a more automated fashion. Such as running the script in the background as a service. However, after a few days the kerberos keys become invalid killing access to the NFS share and the data.
Is there a way to generate some account/keys that will have permanent access for service level stuff like this?
-Kevin _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahoste...
duh.... it moved again https://github.com/gssapi/gssproxy/tree/main/docs
the example is your answer https://github.com/gssapi/gssproxy/blob/main/docs/NFS.md
Rob
Op do 8 okt. 2020 om 19:03 schreef Rob Verduijn rob.verduijn@gmail.com:
Hi, Check this, it is already installed on your rhel/centos server, and works great with ipa. ( in fact the lead dev is also a dev on ipa ) https://pagure.io/gssproxy
Rob
Op do 8 okt. 2020 om 18:20 schreef Kevin Vasko via FreeIPA-users < freeipa-users@lists.fedorahosted.org>:
Hello,
We have an application that does some data processing on our NFS server. Users typically just ssh into a box which then has a kerberos key generated for them, which allows them access the NFS share and run the script.
We are wanting to set this up in a more automated fashion. Such as running the script in the background as a service. However, after a few days the kerberos keys become invalid killing access to the NFS share and the data.
Is there a way to generate some account/keys that will have permanent access for service level stuff like this?
-Kevin _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahoste...
On 08.10.20 19:05, Rob Verduijn via FreeIPA-users wrote:
duh.... it moved again https://github.com/gssapi/gssproxy/tree/main/docs
the example is your answer https://github.com/gssapi/gssproxy/blob/main/docs/NFS.md
I didn't even know this is possible. Thanks a lot!
Cheers, Ronald
freeipa-users@lists.fedorahosted.org