https://github.com/nordunet/krb5-docker
https://github.com/nordunet/krb5-docker
Last synced: 4 months ago
JSON representation
- Host: GitHub
- URL: https://github.com/nordunet/krb5-docker
- Owner: NORDUnet
- License: other
- Created: 2018-06-13T12:37:59.000Z (almost 7 years ago)
- Default Branch: master
- Last Pushed: 2018-06-13T12:38:14.000Z (almost 7 years ago)
- Last Synced: 2024-12-30T22:42:16.909Z (5 months ago)
- Language: Shell
- Size: 3.91 KB
- Stars: 2
- Watchers: 9
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE.txt
Awesome Lists containing this project
README
# Kerberos for testing
A quick and easy docker image for testing against a kerberos. Comes in two flavors MIT kerberos and heimdal.
## Building
```
# MIT kerberos
$ docker build -f Dockerfile.mit -t krb5-alpine .
# Heimdal
$ docker build -f Dockerfile.heimdal -t heimdal-alpine .
```
## Running
```
$ docker run --rm -ti -p 127.0.0.1:8888:88 -p 127.0.0.1:7749:749 -v $(pwd)/keytabs:/opt/keytabs -e PRINCIPALS="pwman:pwmantest markus:test" -e REALM=NORDU.NET krb5-alpine
$ docker run --rm -ti -p 127.0.0.1:8888:88 -p 127.0.0.1:7749:749 -v $(pwd)/keytabs:/opt/keytabs -e PRINCIPALS="pwman:pwmantest markus:test" -e REALM=NORDU.NET heimdal-alpine
```
## Environment varables
- `PRINCIPALS` a space seperated string defining principals to create. For random password just skip the `:password`. e.g. `markus/admin:pwmantest markus` Defaults to `pwman:pwmantest`
- `REALM` the realm to use defaults to `EXAMPLE.COM`
## Other config
- The acl is done in `/opt/heimdal/kadmind.acl` or `/opt/krb5/kadm5.acl`. Changes to `kadmincd.acl` in heimdal requires container restart.
- `/etc/krb5.conf` default kerberos config
- `/var/lib/krb5kdc/kdc.conf` MIT KDC config