Kerberos authentication to console and API not fully functional

Solution In Progress - Updated -

Issue

  • We are trying to setup a configuration for supporting Active Directory authentication for Openshift using Kerberos.
    The setup is documented in Openshift Enterprise 3.1 Installation and Configuration § 7.2.8 but is not fully working.

The part about login from a browser in the console seems working.
But when using the OC CLI, it seems this tool is not able to use kerberos authentication. It seems it is only able to authenticate through basic authentication.

Could you confirm OC CLI is kerberised?

  • On Windows or Unix Client Workstation, when doing "oc login", the user shall not be promted for a password.

Environment

  • Openshift Enterprise 3.1.1

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content