GitHub - bluemind-net/hps-kerberos-sample: BlueMind HPS configuration sample for Kerberos support

bluemind-net / hps-kerberos-sample Public

Notifications You must be signed in to change notification settings
Fork 0
Star 0

BlueMind HPS configuration sample for Kerberos support

Notifications

Name		Name	Last commit message	Last commit date
Latest commit History 1 Commit
README		README
bm-hps.ini		bm-hps.ini
hps.keytab		hps.keytab
jaas.conf		jaas.conf
krb5.ini		krb5.ini
mappings.ini		mappings.ini

Repository files navigation

Sample files for hps kerberos support
=====================================

Your Blue Mind is on hps.foo.lan, on the same lan as active
directory (172.16.45.3).

Your active directory domain is foo.lan

On AD
-----

Create a normal user for service authentication, for example:
hps with the password TVz7eXfE!

Then execute in cmd.exe prompt:
setspn -A HTTP/hps.foo.lan hps

The output should look like:
Registering ServicePrincipalNames for CN=hps,CN=Users,DC=foo,DC=lan
	    HTTP/hps.foo.lan
Updated object

Then you will generate a keytab:
ktpass /out c:\hps.keytab /mapuser [email protected] /princ HTTP/[email protected] /pass TVz7eXfE! /kvno 0

The output should look like:
Targeting domain controller: WIN-BJ666K3L.foo.lan
Using legacy password setting method
Successfully mapped HTTP/hps.foo.lan to hps.
Output keytab to c:\hps.keytab

On Blue Mind
------------

Check Kerberos documentation from https://doc.bluemind.net