Authentication

From the Linux and Unix Users Group at Virginia Teck Wiki
Revision as of 08:25, 3 January 2019 by Pew (talk | contribs)
Jump to: navigation, search

VTLUUG uses chimera as it's FreeIPA server, and all VTLUUG hosts except joey, the router, are in its domain.

Account maintenance instructions

All users can log into [Chimera's FreeIPA web GUI to edit their account. Yes, it does have a self signed cert. Get over it /s

For management of the entire domain, officers are able to add, remove, or modify users in any way.

History

VTLUUG has been was Kerberos and LDAP for authentication until the CVL eviction. We then migrated to an LDAP only domain due to a lack of IPv6 on behind router.ece.vt.edu. The old Kerberos server was configured to work on IPv6 only, therefore, we were required to migrate away from its use for authentication.

With the old deployment, acidburn should be acceptable through normal password authentication over ssh. There is no need to configure tickets or anything else Kerberos related.