Description of problem: Currently, when configuring katello to use IdM/FreeIPA as an authentication source, the documentation [1] directs the user to configure katello using an LDAP user/password. IdM/FreeIPA support the use of GSSAPI to authenticate to LDAP, which is an optimal(and more secure) method of authentication. This RFE is to request an update to katello to support GSSAPI authentication to IdM, and a way to specify the Kerberos keytab containing the principal credentials to be used. Version-Release number of selected component (if applicable): katello-configure-1.4.4-5.el6sam.noarch [1] - https://access.redhat.com/site/documentation/en-US/Red_Hat_Subscription_Management/1/html-single/Using_Subscription_Asset_Manager/index.html#sam-ldap-config
The release of Satellite 5.8 we are deprecating the support of Subscription Asset Manager. The release notes for 5.8 can be found at https://access.redhat.com/documentation/en-us/red_hat_satellite/5.8/pdf/release_notes/Red_Hat_Satellite-5.8-Release_Notes-en-US.pdf. I am therefore closing out this bug as WONTFIX. If you believe this to be an error, please feel free tor each out to either Rich Jerrido or Bryan Kearney. Thank you!