Using Kerberos with a laboratory's Active Directory

Site Administrators
1

Hello,

I would like to test the integration of a EOS cluster with Active Directory and make Kerberos authentication work. I read the thread: EOS authentication system (unix and krb5) in this forum but here the picture is different.

I suppose I could not try (as a test) to link our EOS manager to CERN’s Kerberos (using cern-get-keytab for example) because the EOS cluster is not inside CERN. Can someone confirm ?

Has someone performed the steps to integrate an EOS cluster with a local Active Directory outside CERN ?

If yes, what is the procedure ?

Thank you.

JM