You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@directory.apache.org by bu...@apache.org on 2013/02/07 19:15:22 UTC
svn commit: r849791 - in /websites/staging/directory/trunk/content: ./
apacheds/kerberos-ug/1.1.1-realms.html
apacheds/kerberos-ug/1.1.2-principals.html apacheds/kerberos-user-guide.html
Author: buildbot
Date: Thu Feb 7 18:15:22 2013
New Revision: 849791
Log:
Staging update by buildbot for directory
Added:
websites/staging/directory/trunk/content/apacheds/kerberos-ug/1.1.2-principals.html
Modified:
websites/staging/directory/trunk/content/ (props changed)
websites/staging/directory/trunk/content/apacheds/kerberos-ug/1.1.1-realms.html
websites/staging/directory/trunk/content/apacheds/kerberos-user-guide.html
Propchange: websites/staging/directory/trunk/content/
------------------------------------------------------------------------------
--- cms:source-revision (original)
+++ cms:source-revision Thu Feb 7 18:15:22 2013
@@ -1 +1 @@
-1443620
+1443639
Modified: websites/staging/directory/trunk/content/apacheds/kerberos-ug/1.1.1-realms.html
==============================================================================
--- websites/staging/directory/trunk/content/apacheds/kerberos-ug/1.1.1-realms.html (original)
+++ websites/staging/directory/trunk/content/apacheds/kerberos-ug/1.1.1-realms.html Thu Feb 7 18:15:22 2013
@@ -130,7 +130,7 @@
</div>
<div class="nav_next">
- <a href="1.1.2-principal.html">1.1.2 - Principal</a>
+ <a href="1.1.2-principals.html">1.1.2 - Principals</a>
</div>
<div class="clearfix"></div>
@@ -175,7 +175,7 @@ ads-krbprimaryrealm: EXAMPLE.COM
</div>
<div class="nav_next">
- <a href="1.1.2-principal.html">1.1.2 - Principal</a>
+ <a href="1.1.2-principals.html">1.1.2 - Principals</a>
</div>
<div class="clearfix"></div>
Added: websites/staging/directory/trunk/content/apacheds/kerberos-ug/1.1.2-principals.html
==============================================================================
--- websites/staging/directory/trunk/content/apacheds/kerberos-ug/1.1.2-principals.html (added)
+++ websites/staging/directory/trunk/content/apacheds/kerberos-ug/1.1.2-principals.html Thu Feb 7 18:15:22 2013
@@ -0,0 +1,201 @@
+<!DOCTYPE html>
+<!--
+ Licensed to the Apache Software Foundation (ASF) under one or more
+ contributor license agreements. See the NOTICE file distributed with
+ this work for additional information regarding copyright ownership.
+ The ASF licenses this file to You under the Apache License, Version 2.0
+ (the "License"); you may not use this file except in compliance with
+ the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
+-->
+<html>
+ <head>
+ <title>1.1.2 - Principals — Apache Directory</title>
+
+ <link href="./../../css/common.css" rel="stylesheet" type="text/css">
+ <link href="./../../css/green.css" rel="stylesheet" type="text/css">
+
+
+ <link rel="shortcut icon" href="./../../images/server-icon_16x16.png">
+
+ <!-- Google Analytics -->
+ <script src="http://www.google-analytics.com/urchin.js" type="text/javascript"></script>
+ <script type="text/javascript">
+ _uacct = "UA-1358462-1";
+ urchinTracker();
+ </script>
+ </head>
+ <body>
+ <div id="container">
+ <div id="header">
+ <div id="subProjectsNavBar">
+ <a href="./../../">
+
+ Apache Directory Project
+
+ </a>
+ |
+ <a href="./../../apacheds">
+
+ <STRONG>ApacheDS</STRONG>
+
+ </a>
+ |
+ <a href="./../../studio">
+
+ Apache Directory Studio
+
+ </a>
+ |
+ <a href="./../../api">
+
+ Apache LDAP API
+
+ </a>
+ </div><!-- subProjectsNavBar -->
+ </div><!-- header -->
+ <div id="content">
+ <div id="leftColumn">
+
+<div id="navigation">
+
+ <h5>ApacheDS 2.0</h5>
+ <ul>
+ <li><a href="./../../apacheds/">Home</a></li>
+ <li><a href="./../../apacheds/features.html">Features</a></li>
+ </ul>
+ <h5>Downloads</h5>
+ <ul>
+ <li><a href="./../../apacheds/downloads.html">ApacheDS 2.0.0-M10</a> <img src="./../../images/new_badge.gif" alt="" style="margin-bottom:-3px;" border="0"></li>
+ <li><a href="./../../apacheds/download-old-versions.html">Older versions</a></li>
+ </ul>
+ <h5>Documentation</h5>
+ <ul>
+ <li><a href="./../../apacheds/basic-user-guide.html">Basic User Guide </a></li>
+ <li><a href="./../../apacheds/advanced-user-guide.html">Advanced User Guide</a></li>
+ <li><a href="./../../apacheds/developer-guide.html">Developer Guide</a></li>
+ <li><a href="./../../apacheds/kerberos-user-guide.html">Kerberos User Guide</a></li>
+ <li><a href="./../../apacheds/configuration/ads-2.0-configuration.html">Configuration</a></li>
+ <!--li><a href="./../../apacheds/gen-docs/latest">Generated Reports (e.g. JavaDocs)</a></li-->
+ </ul>
+
+
+ <h5>Support</h5>
+ <ul>
+ <li><a href="./../../mailing-lists-and-irc.html">Mailing Lists & IRC</a></li>
+ <li><a href="./../../sources.html">Sources</a></li>
+ <li><a href="./../../issue-tracking.html">Issue Tracking</a></li>
+ <li><a href="./../../commercial-support.html">Commercial Support</a></li>
+ </ul>
+ <h5>Community</h5>
+ <ul>
+ <li><a href="./../../contribute.html">How to Contribute</a></li>
+ <li><a href="./../../team.html">Team</a></li>
+ <li><a href="./../../original-project-proposal.html">Original Project Proposal</a></li>
+ <li><a href="./../../special-thanks.html" class="external-link" rel="nofollow">Special Thanks</a></li>
+ </ul>
+ <h5>About Apache</h5>
+ <ul>
+ <li><a href="http://www.apache.org/">Apache</a></li>
+ <li><a href="http://www.apache.org/licenses/">License</a></li>
+ <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
+ <li><a href="http://www.apache.org/foundation/thanks.html">Thanks</a></li>
+ <li><a href="http://www.apache.org/security/">Security</a></li>
+ </ul>
+ <a href="http://acna13.eventbrite.com/?ref=ecount"><img src="http://holdenweb.com/static/images/BannerSquareSmall.png" width="168" height="140"></a>
+
+</div><!-- navigation -->
+
+ </div><!-- leftColumn -->
+ <div id="rightColumn">
+
+
+ <div class="nav">
+ <div class="nav_prev">
+
+ <a href="1.1.1-realms.html">1.1.1 - Realms</a>
+
+ </div>
+ <div class="nav_up">
+
+ <a href="1.1-introduction.html">1.1 - Introduction</a>
+
+ </div>
+ <div class="nav_next">
+
+ <a href="1.1.3-keys.html">1.1.3 - Keys</a>
+
+ </div>
+ <div class="clearfix"></div>
+ </div>
+
+
+<h1 id="principals">Principals</h1>
+<p>The Kerberos <strong>Principal</strong> is any entity to which the server can assign a <strong>Ticket</strong>. Typically, we can think of three kinds of <strong>Principals</strong> :</p>
+<div class="codehilite"><pre><span class="o">*</span> <span class="n">Users</span>
+<span class="o">*</span> <span class="n">Services</span>
+<span class="o">*</span> <span class="n">hosts</span>
+</pre></div>
+
+
+<p>Each <strong>Principal</strong> is unique in the Kerberos database. This is the way we identify the entity.</p>
+<p>A Kerberos <strong>Principal</strong> is a combinaison of three parts :</p>
+<div class="codehilite"><pre><span class="o">*</span> <span class="n">the</span> <span class="n">name</span> <span class="p">(</span><span class="n">the</span> <span class="n">primary</span><span class="p">)</span>
+<span class="o">*</span> <span class="n">an</span> <span class="n">optional</span> <span class="n">instance</span>
+<span class="o">*</span> <span class="n">the</span> <span class="n">realm</span> <span class="n">they</span> <span class="n">are</span> <span class="n">associated</span> <span class="n">with</span>
+</pre></div>
+
+
+<p>The optional instance is used to provide more than one role to an entity, without having to create N <strong>Principal</strong> for a single user (an administrator is also a normal user, and it's good to qualify the user by adding his admin qualificiation in one <strong>Principal</strong> to create a new and easy to remember <strong>Principal</strong>)</p>
+<p>The <strong>Principal</strong> syntax is the following :</p>
+<div class="codehilite"><pre><primary> ['/' <instance>]* '@' <realm>
+</pre></div>
+
+
+<p><DIV class="info" markdown="1">
+For hosts, we use "host" as a primary, and the instances are the hostnames.
+</DIV></p>
+<p>Those are examples of valid <strong>Principals</strong></p>
+<div class="codehilite"><pre><span class="n">john</span><span class="nv">@APACHE</span><span class="o">.</span><span class="n">ORG</span>
+<span class="n">john</span><span class="o">/</span><span class="n">admin</span><span class="nv">@APACHE</span><span class="o">.</span><span class="n">ORG</span>
+<span class="n">host</span><span class="sr">/www.apache.org/</span><span class="n">apache</span><span class="o">.</span><span class="n">org</span><span class="nv">@APACHE</span><span class="o">.</span><span class="n">ORG</span>
+<span class="n">ldap</span><span class="o">/</span><span class="n">www</span><span class="o">.</span><span class="n">apache</span><span class="o">.</span><span class="n">org</span><span class="nv">@APACHE</span><span class="o">.</span><span class="n">ORG</span>
+</pre></div>
+
+
+ <div class="nav">
+ <div class="nav_prev">
+
+ <a href="1.1.1-realms.html">1.1.1 - Realms</a>
+
+ </div>
+ <div class="nav_up">
+
+ <a href="1.1-introduction.html">1.1 - Introduction</a>
+
+ </div>
+ <div class="nav_next">
+
+ <a href="1.1.3-keys.html">1.1.3 - Keys</a>
+
+ </div>
+ <div class="clearfix"></div>
+ </div>
+
+
+ </div><!-- rightColumn -->
+ <div id="endContent"></div>
+ </div><!-- content -->
+ <div id="footer">© 2003-2012, <a href="http://www.apache.org">The Apache Software Foundation</a> - <a href="./../../privacy-policy.html">Privacy Policy</a><br />
+ Apache Directory, ApacheDS, Apache Directory Server, Apache Directory Studio, Apache LDAP API, Apache Triplesec, Triplesec, Apache, the Apache feather logo, and the Apache Directory project logos are trademarks of The Apache Software Foundation.
+ </div>
+ </div><!-- container -->
+ </body>
+</html>
\ No newline at end of file
Modified: websites/staging/directory/trunk/content/apacheds/kerberos-user-guide.html
==============================================================================
--- websites/staging/directory/trunk/content/apacheds/kerberos-user-guide.html (original)
+++ websites/staging/directory/trunk/content/apacheds/kerberos-user-guide.html Thu Feb 7 18:15:22 2013
@@ -127,7 +127,7 @@
<li><a href="kerberos-ug/1-kerberos.html">1 - What is Kerberos</a><ul>
<li><a href="kerberos-ug/1.1-introduction.html">1.1 - Introduction</a><ul>
<li><a href="kerberos-ug/1.1.1-realms.html">1.1.1 - Realms</a></li>
-<li><a href="kerberos-ug/1.1.2-Principal.html">1.1.2 - Principal</a></li>
+<li><a href="kerberos-ug/1.1.2-principals.html">1.1.2 - Principals</a></li>
<li><a href="kerberos-ug/1.1.3-keys.html">1.1.3 - Keys</a></li>
<li><a href="kerberos-ug/1.1.4-kdc.html">1.1.4 - KDC (Key Distribution Center)</a></li>
<li><a href="kerberos-ug/1.1.5-database.html">1.1.5 - Database</a></li>