Show Table of Contents
8.2.3. Authenticating Using Kerberos
Configuring Kerberos authentication to authenticate OpenShift Enterprise users is beyond the scope of this guide. Consult your IT department for more information.
However, an example configuration that can be edited is provided to specify your Kerberos service parameters:
#cd /var/www/openshift/broker/httpd/conf.d/#cp openshift-origin-auth-remote-user-kerberos.conf.sample openshift-origin-auth-remote-user.conf#vim openshift-origin-auth-remote-user.conf
Modify the
KrbServiceName and KrbAuthRealms settings to suit the requirements of your Kerberos service. Ensure the Kerberos server's firewall is configured to allow access by the broker hosts. See the mod_auth_kerb documentation at http://modauthkerb.sourceforge.net/configure.html for more information.
Restart the broker application for your changes to take effect:
# service openshift-broker restartNote
Using this method, user administration must be performed with your Kerberos service.
Where did the comment section go?
Red Hat's documentation publication system recently went through an upgrade to enable speedier, more mobile-friendly content. We decided to re-evaluate our commenting platform to ensure that it meets your expectations and serves as an optimal feedback mechanism. During this redesign, we invite your input on providing feedback on Red Hat documentation via the discussion platform.