Drift/pvv-nixos-config
Drift
/
pvv-nixos-config
16
4
Fork 1
Code Issues Pull Requests 6 Wiki Activity
pvv-nixos-config/hosts/dagali/TODO.md

2.6 KiB
Raw Blame History

Tracking document for new PVV kerberos auth stack

Bensinstasjon på heimdal

Bensinstasjon på heimdal

TODO:

  • setup heimdal

  • setup cyrus sasl

    • ensure running with systemd
    • verify GSSAPI support plugin is installed
      • nix-shell -p cyrus_sasl --command pluginviewer
    • create "host/localhost@PVV.NTNU.NO" and export to keytab
    • verify cyrus sasl is able to talk to heimdal
      • sudo testsaslauthd -u oysteikt -p <password>
    • provide ldap principal to cyrus sasl through keytab

  • setup openldap

    • ensure running with systemd
    • verify openldap is able to talk to cyrus sasl
    • create user for oysteikt in openldap
    • authenticate openldap login through sasl
      • does this require creating an ldap user?

  • fix smbk5pwd integration

    • add smbk5pwd schemas to openldap
    • create openldap db for smbk5pwd with overlays
    • test to ensure that user sync is working
    • test as user source (replace passwd)
    • test as PAM auth source
    • test as auth source for 3rd party appliation

  • Set up ldap administration panel

    • Doesn't seem like there are many good ones out there. Maybe phpLDAPAdmin?

  • Set up kerberos SRV DNS entry

Information and URLS