Kerberos and Apache reverse proxy
Dmitri Pal
dpal at redhat.com
Sat Jul 14 19:14:18 EDT 2018
On Sat, Jul 14, 2018 at 6:51 AM, Jochen Hein <jochen at jochen.org> wrote:
> Dmitri Pal <dpal at redhat.com> writes:
>
> > Some hints on how to deal with proxy if you want Kerberos to work can be
> > found here.
> > https://ssimo.org/blog/id_019.html
> > I am not sure whether they are applicable to your situation or not.
>
> Thanks for the hint.
>
> > What you can do is try KDC proxy instead of the reverse proxy.
> > https://github.com/latchset/kdcproxy/blob/master/README
>
> That's for getting a kerberos ticket from you KDC via HTTP instead of
> port 88. I guess it wouldn't help here.
>
It depends how tickets are acquired and where the firewalls are.
>
> Jochen
>
> --
> This space is intentionally left blank.
>
--
Thank you,
Dmitri Pal
Engineering Director, Identity Management and Platform Security
Red Hat, Inc.
More information about the Kerberos
mailing list