Services Supporting Kerberos And/or TLS Client Certificate Authentication

Home » CentOS » Services Supporting Kerberos And/or TLS Client Certificate Authentication
CentOS 2 Comments

Hello,

We’re starting to use FreeIPA in house (which is awesome btw) which means that Kerberos and TLS client certificate authentication is suddenly quite easy. Im looking for a list of common Linux services with data on how one can Authenticate/Authorise for these services.

* httpd support TLS client certificate authentication and Kerberos
* rabbitmq supports TLS client certificate authentication
* dovecot supports Kerberos and …

etc, etc

Cheers,

Andrew

2 thoughts on - Services Supporting Kerberos And/or TLS Client Certificate Authentication

  • Do you want to use Kerberos to authenticate user/passwords? Or are you looking to use the user’s existing kerberos ticket to authenticate services?

    You can use mod_auth_kerb for httpd with any client that supports the Negotiate authentication method. There’s also tools to let it use SASL to perform plain text password authentication, but I’m not familiar with it.

    Dovecot supports GSSAPI authentication as well as using SASL. Sendmail and Postfix too.

    Sorry, not sure about rabbitmq.