Project

General

Profile

Feature #26330

Add API to get Kerberos principal

Added by Daisuke Imai over 3 years ago. Updated over 3 years ago.

Status:
Resolved
Priority:
Important
Assignee:
Timur Bakeyev
Category:
Middleware
Target version:
11.1-RC3
Estimated time:
Severity:
New
Reason for Closing:
Reason for Blocked:
Needs QA:
No
Needs Doc:
Yes
Needs Merging:
Yes
Needs Automation:
No
Support Suite Ticket:
n/a
Hardware Configuration:

Description

We need APIs for getting kerberos realm and kerberos principal

Related issues

Related to FreeNAS - Bug #24582: please provide API or it's documentation for implementing 'Kerberose Realms', 'Kerberose Keytabs' and 'Kerberose Settings' in new webuiClosed: Duplicate2017-06-16

Associated revisions

Revision 21654e74 (diff)
Added by Timur I. Bakeyev over 3 years ago

Add REST API endpoint for KerberosPrincipal Ticket: #26330

Revision abb0ea7b (diff)
Added by Timur Bakeyev over 3 years ago

Add REST API endpoint for KerberosPrincipal (#373) Ticket: #26330

Revision ec75c398 (diff)
Added by Timur I. Bakeyev over 3 years ago

Add REST API endpoint for KerberosPrincipal (#373) Ticket: #26330 (cherry picked from commit abb0ea7be8e09d4a66aac5413902a8a3064e96e0)

Revision 479fb686 (diff)
Added by Timur Bakeyev over 3 years ago

Add REST API endpoint for KerberosPrincipal (#373) (#436) Ticket: #26330 (cherry picked from commit abb0ea7be8e09d4a66aac5413902a8a3064e96e0)

History

#1 Updated by Daisuke Imai over 3 years ago

Daisuke Imai wrote:

We need APIs for getting kerberos principal. API for kerberos realm already exists.

#2 Updated by Daisuke Imai over 3 years ago

We need APIs for getting kerberos principal. API for kerberos realm already exists.

#3 Updated by Timur Bakeyev over 3 years ago

  • Status changed from Unscreened to Needs Developer Review
  • Assignee changed from Timur Bakeyev to John Hixson

PR: https://github.com/freenas/freenas/pull/373

# json_get 'http://localhost/api/v1.0/directoryservice/kerberosprincipal/'

[
  {
    "id": 1,
    "principal_encryption": "arcfour-hmac-md5",
    "principal_name": "administrator@ad.win2016.freenas",
    "principal_timestamp": "1970-01-01T00:00:00",
    "principal_version": 1
  }
]

id=1 in the above links to id=1 in the keytab

# json_get 'http://localhost/api/v1.0/directoryservice/kerberoskeytab/'

[
  {
    "id": 1,
    "keytab_file": "BQIAAABCAAEAEmFkLndpbjIwMTYuZnJlZW5hcwANYWRtaW5pc3RyYXRvcgAAAAEAAAAAAQAXABCSIvA8jGlT+BhEefG+Va9D",
    "keytab_name": "administrator.ad.win2016" 
  }
]


# json_get 'http://localhost/api/v1.0/directoryservice/kerberosrealm/'

[
  {
    "id": 2,
    "krb_admin_server": "",
    "krb_kdc": "",
    "krb_kpasswd_server": "",
    "krb_realm": "AD.WIN2016.FREENAS" 
  }
]

# json_get 'http://localhost/api/v1.0/directoryservice/kerberossettings/'

{
  "id": 1,
  "ks_appdefaults_aux": "",
  "ks_libdefaults_aux": "" 
}

#4 Updated by Timur Bakeyev over 3 years ago

  • Status changed from Needs Developer Review to Reviewed by Developer
  • Assignee changed from John Hixson to Timur Bakeyev

#5 Updated by Dru Lavigne over 3 years ago

  • Subject changed from Needed APIs to Add API to get Kerberos principal
  • Target version changed from 11.1-U1 to 11.1

#6 Updated by Dru Lavigne over 3 years ago

  • Status changed from Reviewed by Developer to Ready For Release
  • Target version changed from 11.1 to 11.1-RC2

#7 Updated by Dru Lavigne over 3 years ago

  • Target version changed from 11.1-RC2 to 11.1-RC3

#8 Updated by Dru Lavigne over 3 years ago

  • Status changed from Ready For Release to Resolved

#9 Updated by Nick Wolff over 3 years ago

  • Needs QA changed from Yes to No
  • QA Status Test Passes FreeNAS added
  • QA Status deleted (Not Tested)

#10 Updated by Timur Bakeyev over 3 years ago

  • Related to Bug #24582: please provide API or it's documentation for implementing 'Kerberose Realms', 'Kerberose Keytabs' and 'Kerberose Settings' in new webui added

Also available in: Atom PDF