internet/community.general
3
0
Fork 0
mirror of https://github.com/ansible-collections/community.general.git synced 2026-05-08 06:12:51 +00:00
Code Issues Packages Projects Releases Wiki Activity

identity: Add GSSAPI suport for FreeIPA authentication (#52031)

Browse Source 
* identity: Add GSSAPI suport for FreeIPA authentication

This enables the usage of GSSAPI for authentication, instead of having
to pass the username and password as part of the playbook run.

If there is GSSAPI support, this makes the password optional, and will
be able to use the KRB5_CLIENT_KTNAME or the KRB5CCNAME environment
variables; which are standard when using kerberos authentication.

Note that this depends on the urllib_gssapi library, and will only
enable this if that library is available.

* identity: Add documentation for GSSAPI authentication for FreeIPA

This documentation describes how to use GSSAPI authentication with the
IPA identity modules.

* identity: Add changelog for GSSAPI support for IPA

This adds the changelog entry for the GSSAPI authentication feature for
the IPA identity module.
This commit is contained in:
Juan Antonio Osorio
2019-02-13 17:38:13 +02:00
committed by John R Barker
parent 7d55dc1a38
commit 9f081ca04f
6 changed files with 69 additions and 29 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
changelogs/fragments/52031-gssapi-for-identity-ipa.yaml Normal file
View File

@@ -0,0 +1,5 @@
minor_changes:
- identity - Added support for GSSAPI authentication for the FreeIPA modules.
This is enabled by either using the KRB5CCNAME or the KRB5_CLIENT_KTNAME
environment variables when calling the ansible playbook. Note that to enable
this feature, one has to install the urllib_gssapi python library.