Bug 1021632

Summary:	[RFE] katello-configure should support kerberos keytab when integrated with IdM/FreeIPA
Product:	[Retired] Subscription Asset Manager	Reporter:	Rich Jerrido <rjerrido>
Component:	katello-configure	Assignee:	Katello Bug Bin <katello-bugs>
Status:	CLOSED WONTFIX	QA Contact:	SAM QE List <sam-qe-list>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	Nightly
Target Milestone:	rc
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2017-06-26 20:40:34 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	971511

Description Rich Jerrido 2013-10-21 16:54:55 UTC

Description of problem:

Currently, when configuring katello to use IdM/FreeIPA as an authentication source, the documentation [1] directs the user to configure katello using an LDAP user/password. IdM/FreeIPA support the use of GSSAPI to authenticate to LDAP, which is an optimal(and more secure) method of authentication. This RFE is to request an update to katello to support GSSAPI authentication to IdM, and a way to specify the Kerberos keytab containing the principal credentials to be used. 


Version-Release number of selected component (if applicable):
katello-configure-1.4.4-5.el6sam.noarch

[1] - https://access.redhat.com/site/documentation/en-US/Red_Hat_Subscription_Management/1/html-single/Using_Subscription_Asset_Manager/index.html#sam-ldap-config

Comment 1 Bryan Kearney 2017-06-26 20:40:34 UTC

The release of Satellite 5.8 we are deprecating the support of Subscription Asset Manager. The release notes for 5.8 can be found at https://access.redhat.com/documentation/en-us/red_hat_satellite/5.8/pdf/release_notes/Red_Hat_Satellite-5.8-Release_Notes-en-US.pdf.

I am therefore closing out this bug as WONTFIX. If you believe this to be an error, please feel free tor each out to either Rich Jerrido or Bryan Kearney. Thank you!