[Kerberos] Add stack documentation for Kerberos realm #98
Conversation
This commit adds documentation for Kerberos realm in stack-docs. It briefly talks about Kerberos authentication, its support and then points to settings and configuration documentation.
There was a problem hiding this comment.
I made one small edit, then copied some additional content from elastic/elasticsearch#32662
|
|
||
| [[kerberos-terms]] | ||
| ==== Key concepts | ||
|
|
There was a problem hiding this comment.
I added this content here instead of elastic/elasticsearch#32662, since it seems like a better fit with the overview info. If you disagree, let me know!
There was a problem hiding this comment.
I wasn't sure about this when I added to the configuring Kerberos section as most of the action was there. But looking at it now makes sense here as it is an introduction part and helps to understand key concepts before moving on to the configuration part. Thank you.
|
|
||
| `instance` is an optional string that qualifies the primary and is separated | ||
| by a slash(`/`) from the primary. For a user, usually it is not used; for hosts, | ||
| it is the fully qualified domain name of the host. |
There was a problem hiding this comment.
It is unclear why hosts are referenced here. Is that related to service principals?
There was a problem hiding this comment.
Not necessary but usually host is for service principals. Even users can have host FQDN as instance part of a principal name. The definition is as per MIT Kerberos documentation and I prefer to keep it the same. Thank you.
This commit adds documentation for Kerberos realm in stack-docs. It briefly talks about Kerberos authentication, terminology, its support and then points to settings and configuration documentation.
This commit adds documentation for Kerberos realm in stack-docs. It briefly talks about Kerberos authentication, terminology, its support and then points to settings and configuration documentation.
This commit adds documentation for Kerberos realm in
stack-docs. It briefly talks about Kerberos authentication,
its support and then points to settings and configuration
documentation.