Kerberos and Apache reverse proxy

[Dmitri Pal]

On Sat, Jul 14, 2018 at 6:51 AM, Jochen Hein <jochen at jochen.org> wrote:

> Dmitri Pal <dpal at redhat.com> writes:
>
> > Some hints on how to deal with proxy if you want Kerberos to work can be
> > found here.
> > https://ssimo.org/blog/id_019.html
> > I am not sure whether they are applicable to your situation or not.
>
> Thanks for the hint.
>
> > What you can do is try KDC proxy instead of the reverse proxy.
> > https://github.com/latchset/kdcproxy/blob/master/README
>
> That's for getting a kerberos ticket from you KDC via HTTP instead of
> port 88.  I guess it wouldn't help here.
>

​It depends how tickets are acquired and where the firewalls are. ​

>
> Jochen
>
> --
> This space is intentionally left blank.
>



-- 

Thank you,
Dmitri Pal

Engineering Director, Identity Management and Platform Security
Red Hat, Inc.