[DIRKRB-280] Kadmin tool will be authenticated first before any real operation

• Type: Sub-task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.0.0-RC1
• Assignee: Jiajia Li
• Reporter: Kai Zheng
• Created: 30/May/15 02:07
• Updated: 16/Jun/16 09:05
• Resolved: 22/Jul/15 02:34

Description

Currently a local mode kadmin tool for Kerby KDC is almost ready equipped with basic functionalities. The mode requires it should be launched in the KDC server host. This is to move on and enforce necessary authentication for it. The kadmin@KDC-REALM principal will be used to perform the authentication. To be simple, once its credential (password, or keytab) is validated by an AS-REQ returning a tgt, the authentication is passed. No GSSAPI or TGS-REQ/AP-REQ will be involved.