Kerberos authentication to console and API not fully functional
Issue
- We are trying to setup a configuration for supporting Active Directory authentication for Openshift using Kerberos.
The setup is documented in Openshift Enterprise 3.1 Installation and Configuration § 7.2.8 but is not fully working.
The part about login from a browser in the console seems working.
But when using the OC CLI, it seems this tool is not able to use kerberos authentication. It seems it is only able to authenticate through basic authentication.
Could you confirm OC CLI is kerberised?
- On Windows or Unix Client Workstation, when doing "oc login", the user shall not be promted for a password.
Environment
- Openshift Enterprise 3.1.1
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.
Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.
