Bug 1358399

Summary: [RFE] Kerberos support in Windows CLI tooling
Product: OpenShift Container Platform Reporter: Eric Rich <erich>
Component: RFEAssignee: Derek Carr <decarr>
Status: CLOSED DEFERRED QA Contact: Chuan Yu <chuyu>
Severity: high Docs Contact:
Priority: high    
Version: 3.1.0CC: aos-bugs, charles_sheridan, chuyu, decarr, dherrman, dsulliva, erich, hgomes, jokerman, kabbott, knewcome, knewcomer, ksalunkh, marc.jadoul, mbarrett, misalunk, mjs, mkhan, mmccomas, pweil, sjavurek, ssorce, suchaudh, wsun
Target Milestone: ---   
Target Release: 3.11.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 1327024 Environment:
Last Closed: 2019-06-10 20:08:49 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1327024    
Bug Blocks:    

Description Eric Rich 2016-07-20 15:32:02 UTC
+++ This bug was initially created as a clone of Bug #1327024 +++

Description of problem:
We are trying to setup a configuration for supporting Active Directory authentication for Openshift using Kerberos (using windows).

Using the OC CLI, tooling is not able to use kerberos authentication. It seems it is only able to authenticate through basic authentication.

Could you confirm OC CLI is kerberised (on Windows)?

Version-Release number of selected component (if applicable): 3.2

How reproducible: Always

Actual results:  oc is not kerberised

Expected results:  it should be kerberised

Additional info:

Upstream fix's occurring for linux: https://github.com/openshift/origin/pull/4566

https://trello.com/c/ISLRnN0Y/281-5-support-for-kerberos-in-oc-on-linux was/is targeting (being considered for 3.3) as tracked by Bug #1327024

Comment 17 knewcomer 2018-10-23 15:47:28 UTC
Available in 3.11 as Tech Preview. Will wait until the feature GAs to close.

Comment 20 Kirsten Newcomer 2019-06-10 20:08:30 UTC
This RFE has been moved to https://jira.coreos.com/browse/RFE-154 for final tracking. Feature is Tech Preview in 3.11 and 4.1.