ansible/changelogs/fragments/52031-gssapi-for-identity-ipa.yaml at 35e7fb776a9047158db3afdc9b169003f309763f - cmueller/ansible - tilera Git

cmueller/ansible

Juan Antonio Osorio 9f081ca04f identity: Add GSSAPI suport for FreeIPA authentication (#52031 )

* identity: Add GSSAPI suport for FreeIPA authentication

This enables the usage of GSSAPI for authentication, instead of having
to pass the username and password as part of the playbook run.

If there is GSSAPI support, this makes the password optional, and will
be able to use the KRB5_CLIENT_KTNAME or the KRB5CCNAME environment
variables; which are standard when using kerberos authentication.

Note that this depends on the urllib_gssapi library, and will only
enable this if that library is available.

* identity: Add documentation for GSSAPI authentication for FreeIPA

This documentation describes how to use GSSAPI authentication with the
IPA identity modules.

* identity: Add changelog for GSSAPI support for IPA

This adds the changelog entry for the GSSAPI authentication feature for
the IPA identity module.

2019-02-13 15:38:13 +00:00

5 lines

316 B

YAML

Raw Blame History

 minor_changes:
 - identity - Added support for GSSAPI authentication for the FreeIPA modules.
   This is enabled by either using the KRB5CCNAME or the KRB5_CLIENT_KTNAME
   environment variables when calling the ansible playbook. Note that to enable
   this feature, one has to install the urllib_gssapi python library.