tell about gssproxy

This commit is contained in:
2024-11-25 13:51:22 +01:00
parent 876c3ed9c6
commit 4c2ba347d9

View File

@@ -20,7 +20,12 @@ ktutil: exit
$
```
Note that inside `ktutil` variables are not interpolated as this is not `bash`.
To test if the keytab works as intended do
```
$ kinit -t $UID.keytab -k $USER
$
```
and without output it is working fine.
Then as root (`sudo`) make it known to `gssproxy`:
```
@@ -28,3 +33,5 @@ Then as root (`sudo`) make it known to `gssproxy`:
# chmod 600 /var/lib/gssproxy/clients/$UID.keytab
# chown root:root /var/lib/gssproxy/clients/$UID.keytab
```
If you want to [distribute the keytab with Puppet/Hiera](../files/distribute_files), ensure it is [stored in Hiera encrypted](../../puppet/hiera#encrypt-data).