CERN Accelerating science

Change of Linux Kerberos host identity (keytab) generation system.

Description of Service Change: 

On

              Tuesday 29 January 2013

the current host Kerberos identity generation system (cern-config-keytab) used to generate
"/etc/krb5.keytab" files on CERN Linux systems will be replaced by a new mechanism: cern-get-keytab.

New system provides similar functionality but it has been designed to allow better integration with CERN
Active Directory which is used for Kerberos authentication of Linux systems at CERN since more than a year.

For more information please visit: http://cern.ch/linux/news.shtml#cern-get-keytab

 

Service Element Affected: 
Multiple Services
Effective from: 
Tuesday, January 29, 2013 - 00:00
Posted by: 
IT-OIS
Unit responsible for resolution: 
IT Department