You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@directory.apache.org by bu...@apache.org on 2013/11/28 19:06:07 UTC
svn commit: r888415 - in /websites/staging/directory/trunk/content: ./
apacheds/kerberos-ug/4.2-authenticate-studio.html
Author: buildbot
Date: Thu Nov 28 18:06:06 2013
New Revision: 888415
Log:
Staging update by buildbot for directory
Modified:
websites/staging/directory/trunk/content/ (props changed)
websites/staging/directory/trunk/content/apacheds/kerberos-ug/4.2-authenticate-studio.html
Propchange: websites/staging/directory/trunk/content/
------------------------------------------------------------------------------
--- cms:source-revision (original)
+++ cms:source-revision Thu Nov 28 18:06:06 2013
@@ -1 +1 @@
-1546419
+1546420
Modified: websites/staging/directory/trunk/content/apacheds/kerberos-ug/4.2-authenticate-studio.html
==============================================================================
--- websites/staging/directory/trunk/content/apacheds/kerberos-ug/4.2-authenticate-studio.html (original)
+++ websites/staging/directory/trunk/content/apacheds/kerberos-ug/4.2-authenticate-studio.html Thu Nov 28 18:06:06 2013
@@ -161,9 +161,9 @@ We will suppose that the <strong>Kerbero
<p><img alt="Enable Kerberos Server" src="images/enable-kerberos.png" /></p>
<h3 id="ldap-server-configuration">LDAP Server configuration</h3>
<p>There are a few parameters that are to be set in the <strong>LDAP</strong> configuration :</p>
-<div class="codehilite"><pre>* The <span class="nt"><em></span>SASL host<span class="nt"></em></span> must be the local server name (here, example.net)
-* The <span class="nt"><em></span>SASL principal<span class="nt"></em></span> is <span class="nt"><strong></span>ldap/example.net@EXAMPLE.COM<span class="nt"></strong></span>
-* The <span class="nt"><em></span>Search Base DN<span class="nt"></em></span> should point to the place under which we store users and services (<span class="nt"><em></span>dc=security,dc=example,dc=com<span class="nt"></em></span>)
+<div class="codehilite"><pre>* The SASL host must be the local server name (here, example.net)
+* The SASL principal is <span class="nt"><strong></span>ldap/example.net@EXAMPLE.COM<span class="nt"></strong></span>
+* The Search Base DN should point to the place under which we store users and services (dc=security,dc=example,dc=com)
</pre></div>
@@ -175,8 +175,8 @@ The <em>SASL principal</em> instance par
<p><img alt="LDAP configuration" src="images/ldap-config.png" /></p>
<h3 id="kerberos-server-configuration">Kerberos Server configuration</h3>
<p>Now, you can switch to the Kerberos tab, where some more configuration must be set :</p>
-<div class="codehilite"><pre>* The <span class="nt"><em></span>Primary KDC Realm<span class="nt"></em></span> is EXAMPLE.COM
-* The <span class="nt"><em></span>Search Base DN<span class="nt"><_em></span> is the same as for the LDAP server : <span class="nt"><em></span>dc=security,dc=example,dc=com<span class="nt"></em></span>
+<div class="codehilite"><pre><span class="o">*</span> <span class="n">The</span> <span class="n">Primary</span> <span class="n">KDC</span> <span class="n">Realm</span> <span class="n">is</span> <span class="n">EXAMPLE</span><span class="p">.</span><span class="n">COM</span>
+<span class="o">*</span> <span class="n">The</span> <span class="n">Search</span> <span class="n">Base</span> <span class="n">DN</span> <span class="n">is</span> <span class="n">the</span> <span class="n">same</span> <span class="n">as</span> <span class="k">for</span> <span class="n">the</span> <span class="n">LDAP</span> <span class="n">server</span> <span class="p">:</span> <span class="n">dc</span><span class="p">=</span><span class="n">security</span><span class="p">,</span><span class="n">dc</span><span class="p">=</span><span class="n">example</span><span class="p">,</span><span class="n">dc</span><span class="p">=</span><span class="n">com</span>
</pre></div>
@@ -322,10 +322,10 @@ Three important things :
<p>On the "Connections" tab, right click and select 'New Connection...'</p>
<p><img alt="New Connection" src="images/new-connection.png" /></p>
<p>You will now have to set the network parameters, as in the following popup. Typically, set :</p>
-<div class="codehilite"><pre>* The connection name (here, <span class="nt"><strong></span>Kerberos User<span class="nt"></strong></span>)
-* The LDAP server host (<span class="nt"><strong></span>example.net<span class="nt"></strong></span>)
-* The LDAP server port (<span class="nt"><strong></span>10389<span class="nt"></strong></span>)
-* The Provider (pick <span class="nt"><strong></span>Apache Directory LDAP Client API<span class="nt"></strong></span>)
+<div class="codehilite"><pre><span class="o">*</span> <span class="n">The</span> <span class="n">connection</span> <span class="n">name</span> <span class="p">(</span><span class="n">here</span><span class="p">,</span> <span class="o">**</span><span class="n">Kerberos</span> <span class="n">User</span><span class="o">**</span><span class="p">)</span>
+<span class="o">*</span> <span class="n">The</span> <span class="n">LDAP</span> <span class="n">server</span> <span class="n">host</span> <span class="p">(</span><span class="o">**</span><span class="n">example</span><span class="p">.</span><span class="n">net</span><span class="o">**</span><span class="p">)</span>
+<span class="o">*</span> <span class="n">The</span> <span class="n">LDAP</span> <span class="n">server</span> <span class="n">port</span> <span class="p">(</span><span class="o">**</span>10389<span class="o">**</span><span class="p">)</span>
+<span class="o">*</span> <span class="n">The</span> <span class="n">Provider</span> <span class="p">(</span><span class="n">pick</span> <span class="o">**</span><span class="n">Apache</span> <span class="n">Directory</span> <span class="n">LDAP</span> <span class="n">Client</span> <span class="n">API</span><span class="o">**</span><span class="p">)</span>
</pre></div>
@@ -334,22 +334,22 @@ Three important things :
<p><img alt="Network Parameters" src="images/network-parameters.png" /></p>
<p>Then click on Next to setup the authentication part.
Select the following parameters and values :</p>
-<div class="codehilite"><pre>* Authentication method : **GSSAPI**
-* Bind DN : the user name (here, <span class="nt"><strong></span>hnelson<span class="nt"></b></span>)
-* Bind password : here, <span class="nt"><b></span>secret<span class="nt"></b></span>
-* Do not change anything in the SASL settings
-* Kerberos settings
- * Obtain TGT from KDC
- * Use following configuration :
- * Kerberos Realm : <span class="nt"><b></span>EXAMPLE.COM<span class="nt"></b></span>
- * KDC Host : <span class="nt"><b></span>example.net<span class="nt"></b></span>
- * KDC port : <span class="nt"><b></span>60088<span class="nt"></b></span>
+<div class="codehilite"><pre><span class="o">*</span> <span class="n">Authentication</span> <span class="n">method</span> <span class="p">:</span> <span class="n">GSSAPI</span>
+<span class="o">*</span> <span class="n">Bind</span> <span class="n">DN</span> <span class="p">:</span> <span class="n">the</span> <span class="n">user</span> <span class="n">name</span> <span class="p">(</span><span class="n">here</span><span class="p">,</span> <span class="n">hnelson</span><span class="p">)</span>
+<span class="o">*</span> <span class="n">Bind</span> <span class="n">password</span> <span class="p">:</span> <span class="n">here</span><span class="p">,</span> <span class="n">secret</span>
+<span class="o">*</span> <span class="n">Do</span> <span class="n">not</span> <span class="n">change</span> <span class="n">anything</span> <span class="n">in</span> <span class="n">the</span> <span class="n">SASL</span> <span class="n">settings</span>
+<span class="o">*</span> <span class="n">Kerberos</span> <span class="n">settings</span>
+ <span class="o">*</span> <span class="n">Obtain</span> <span class="n">TGT</span> <span class="n">from</span> <span class="n">KDC</span>
+ <span class="o">*</span> <span class="n">Use</span> <span class="n">following</span> <span class="n">configuration</span> <span class="p">:</span>
+ <span class="o">*</span> <span class="n">Kerberos</span> <span class="n">Realm</span> <span class="p">:</span> <span class="n">EXAMPLE</span><span class="p">.</span><span class="n">COM</span>
+ <span class="o">*</span> <span class="n">KDC</span> <span class="n">Host</span> <span class="p">:</span> <span class="n">example</span><span class="p">.</span><span class="n">net</span>
+ <span class="o">*</span> <span class="n">KDC</span> <span class="n">port</span> <span class="p">:</span> 60088
</pre></div>
<p>Here is the resulting screen :</p>
<p><img alt="Kerberos authentification" src="images/kerberos-authent.png" /></p>
-<p>Clinking in the 'Check Authentication' buton should be succesfull.</p>
+<p>Clinking in the 'Check Authentication' button should be succesfull.</p>
<div class="nav">