UI for Kerberos accounts administration

[Lukas Kubin]

I'm planning to build an web interface for administering our 
Kerberos/OpenAFS/LDAP accounts.
How should I pass credentials to the web service? I can use the 
mod_auth_kerb module for Apache. Then some wrapper script will call 
kadmin command. When I want kadmin not to ask for password everytime it 
is called, I'll have to create an administrator's keytab stored on the 
webserver. That way appear not to be secure.
What solution do people use for authorizing various UI clients for 
access to Kerberos database?
Is there some freely available tool for administering K5 (possibly with 
LDAP and OpenAFS support) accounts?
Thank you.

lukas

-- 
Lukas Kubin

phone: +420596398275
email: kubin at opf.slu.cz

Information centre
The School of Business Administration in Karvina
Silesian University in Opava
Czech Republic
http://www.opf.slu.cz