using kerberos to authenticate for a web api

Mark Pröhl mark at mproehl.net
Tue Nov 5 09:12:14 EST 2013


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 05.11.2013 13:48, Simo Sorce wrote:
> I am not sure about upstream but the version we distribute in
> Fedora and RHEL has Constrained delegation support (specifically
> S4U2Proxy).
Is the S4U support in Fedora mod_auth_kerb configurable? Can it be
used to delegate to any backend service or can it just be used in ipa
admin gui for delegation to 389 ldap? For example, it would be nice to
use S4U in a webmail application to get imap tickets. Would that be
possible?

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iF4EAREIAAYFAlJ4/L0ACgkQcnTijk4OXrK+ZQEAm9kf+z2UwKWIU6fQbSFKIJBf
/l0Xmfl5kkDR4weT6x8BAKyq92h6LHuDKEniCPHT1N7Kn0JtwInyajNuQg/qCBVW
=pL6k
-----END PGP SIGNATURE-----


More information about the Kerberos mailing list