|
I haven't tried to do this, but it should be relatively straight
forward. The biggest trick would be ensuring that your backend servers
hand out the Kerberos credentials for the "generic" address (the address
of your director). So, if you have "svc-1" and "svc-2" being
load-balanced with the name "svc", both "svc-1" and "svc-2" would need
to hand the client the credentials for "svc" instead of their private
credentials.
Let us know if you get it working.
Tony
> -----Original Message-----
> Sent: Tuesday, March 07, 2006 5:02 AM
> Subject: Re: lvs with ssh with kerberos
>
> We are looking at doing the same thing. Have anyone gotten
> this to work?
>
> Thank you,
>
> David Eley
>
> ----- Original Message -----
> From: Peter Michalek <peter@xxxxxxxxxxxx>
> Date: Wednesday, March 1, 2006 3:06 pm
> Subject: lvs with ssh with kerberos
> To: lvs-users@xxxxxxxxxxxxxxxxxxxxxx
>
> > Hello,
> >
> > I'd be interested to know if LVS can be used and setup for silent
> > login(no password prompting, i.e. using ticket forwarding) using
> > ssh and
> > kerberos.
> > In the FAQ, I didn't find any mention of kerberos or what's
> needed to
> > set this up or if it's at all possible:
> >
> > Has anyone made this work?
> >
> > Thanks,
> >
> > Peter
> >
> >
> > _______________________________________________
> > LinuxVirtualServer.org mailing list -
> lvs-users@xxxxxxxxxxxxxxxxxxxxxx
> > Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
> > or go to http://www.in-addr.de/mailman/listinfo/lvs-users
> >
> _______________________________________________
> LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
> Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
> or go to http://www.in-addr.de/mailman/listinfo/lvs-users
>
|
