From 4b988ce3c598c8b59bd0ce77ab7854291c66549f Mon Sep 17 00:00:00 2001 From: Chetan Risbud Date: Mon, 23 Dec 2013 15:46:22 +0530 Subject: Initial import of the swiftkerbauth Imported code till commit f64a3354185f32928e2568d9ece4a52fa4746c05 Changed a code bit to import correct definitions. kerbauth unit tests do run along with gluster-swift. Install script does install swiftkerbauth. import swiftkerbauth from http://review.gluster.org/swiftkrbauth.git Change-Id: Ia89f2b77cc68df10dee2f41ce074f3381ac3c408 Signed-off-by: Chetan Risbud Reviewed-on: http://review.gluster.org/6597 Reviewed-by: Prashanth Pai Reviewed-by: Luis Pabon Tested-by: Luis Pabon --- doc/markdown/auth_guide.md | 22 ++++++++++++++++------ 1 file changed, 16 insertions(+), 6 deletions(-) (limited to 'doc/markdown/auth_guide.md') diff --git a/doc/markdown/auth_guide.md b/doc/markdown/auth_guide.md index 4d38dfa..8e222e3 100644 --- a/doc/markdown/auth_guide.md +++ b/doc/markdown/auth_guide.md @@ -2,24 +2,25 @@ ## Contents * [Keystone](#keystone) -* [Swiftkerbauth](#swiftkerbauth) * [GSwauth](#gswauth) * [Overview](#gswauth_overview) * [Installing GSwauth](#gswauth_install) * [User roles](#gswauth_user_roles) * [GSwauth Tools](#gswauth_tools) * [Authenticating a user](#gswauth_authenticate) +* [Swiftkerbauth](#swiftkerbauth) + * [Architecture](swiftkerbauth/architecture.md) + * [RHEL IPA Server Guide](swiftkerbauth/ipa_server.md) + * [RHEL IPA Client Guide](swiftkerbauth/ipa_client.md) + * [Windows AD Server Guide](swiftkerbauth/AD_server.md) + * [Windows AD Client Guide](swiftkerbauth/AD_client.md) + * [Swiftkerbauth Guide](swiftkerbauth/swiftkerbauth_guide.md) ## Keystone ## The Standard Openstack authentication service TBD -## Swiftkerbauth ## -Kerberos authentication filter for Swift - -TBD - ## GSwauth ## ### Overview ### @@ -278,3 +279,12 @@ bash-4.2$ bash-4.2$ swift --os-auth-token=AUTH_tk7e68ef4698f14c7f95af07ab7b298610 --os-storage-url=http://127.0.0.1:8080/v1/AUTH_test list container1 README.md ~~~ + +## Swiftkerbauth ## +Kerberos authentication filter + +Carsten Clasohm implemented a new authentication filter for swift +that uses Kerberos tickets for single sign on authentication, and +grants administrator permissions based on the users group membership +in a directory service like Red Hat Enterprise Linux Identity Management +or Microsoft Active Directory. -- cgit