398
edits
Changes
no edit summary
= VTLUUG has been using Kerberos and LDAP for authentication since at least September 2012. Our realm is <code>VTLUUG.ORG</code> but may change in the future to something under the vt.edu domain.=
==SSH Authentication with KerberosAccount maintenance instructions ==Put this in your ~/.ssh/config: # Kerberos Host * GSSAPIAuthentication yes GSSAPIDelegateCredentials yes
With the old deployment, [[Infrastructure:Acidburn|acidburn]] should be acceptable through normal password authentication over ssh. There is no need to configure tickets or anything else Kerberos related. =CAS = The '''Virginia Tech Central Authentication System''' or '''CAS''' is the Virginia Tech deployment of the [[Free software|open source]] [[w:Shibboleth (Internet2)|Shibboleth]] authentication system. Shibboleth can be thought of as an identity provider similar to [[w:OpenID|OpenID]], but more centralized, and thus well-liked by institutions such as universities. =Changing user shell=Scripted Login ==On acidburn or blade:The following is a work in progress. Eventually, the following commands should yield a login.* <codepre>kinit$ curl -s -c cookies https://auth.vt.edu/login?service=https://my.vt.edu/Login | sed -nrf sedconf | xargs curl</codepre>* The <code>ldapmodify <<EOF sedconf</code> and input this:file's contents are below.<pre>/name="lt"/s/.*value="([^"]*).*/-d "lt=\1"/p dn: uid/name="_eventId"/s/.*value="([^"]*).*/-d "eventId=username,ou\1"/p/name=People,dc"submit"/s/.*value=vtluug,dc"(^")*".*/-d "submit=org\1"/p changetype/action="/s/.*action="([^;]*)[^?]*(\??[^"]*).*/--url "https: modify\/\/auth.vt.edu\1\2"/p$a -d "username=bob"$a -d "password=bubba"$a -c cookies</pre> Refer to the [[sed]] and [[curl]] manual pages for details on the various commands that drive this script. replace=External Links=* [https: loginShell//auth.vt.edu VT CAS] loginShell* [http: /usr/binwww.computing.vt.edu/zshinfrastructure_services/cas/index.html Description of CAS] [[Category:Infrastructure]] -[[Category:Scripts]] EOF[[Category:Campus computing resources]]