search

atomic-penguin / cookbook-krb5

Chef cookbook for Kerberos 5 authentication
Apache License 2.0
17 stars 18 forks source link

LWRP for principals and keytabs #15

Closed wolf31o2 closed 9 years ago

wolf31o2 commented 9 years ago

This allows for the creation/deletion of principals (in the default realm, only) via a Kerberos Admin server using the rkerberos Ruby gem. It also supports the creation of keytab files, using Kerberos administrator credentials. Currently, there is no support for adding/removing entries from the keytab file, which is a limitation of rkerberos gem. The LWRP will not stomp on an existing keytab file. This will likely require a couple iterations before it's perfect, but it seems to work for me for my use case (setting up Kerberos for Hadoop clusters).

duddun commented 9 years ago

LGTM

dereklwood commented 9 years ago

Some comments to fix, then :+1:

As you mentioned in one of the comments we should probably write a load_current_resource method, but that can be next iteration. this will be useful to get out there and iterate upon.