Author: buildbot Date: Thu Feb 7 18:15:22 2013 New Revision: 849791 Log: Staging update by buildbot for directory Added: websites/staging/directory/trunk/content/apacheds/kerberos-ug/1.1.2-principals.html Modified: websites/staging/directory/trunk/content/ (props changed) websites/staging/directory/trunk/content/apacheds/kerberos-ug/1.1.1-realms.html websites/staging/directory/trunk/content/apacheds/kerberos-user-guide.html Propchange: websites/staging/directory/trunk/content/ ------------------------------------------------------------------------------ --- cms:source-revision (original) +++ cms:source-revision Thu Feb 7 18:15:22 2013 @@ -1 +1 @@ -1443620 +1443639 Modified: websites/staging/directory/trunk/content/apacheds/kerberos-ug/1.1.1-realms.html ============================================================================== --- websites/staging/directory/trunk/content/apacheds/kerberos-ug/1.1.1-realms.html (original) +++ websites/staging/directory/trunk/content/apacheds/kerberos-ug/1.1.1-realms.html Thu Feb 7 18:15:22 2013 @@ -130,7 +130,7 @@
@@ -175,7 +175,7 @@ ads-krbprimaryrealm: EXAMPLE.COM
Added: websites/staging/directory/trunk/content/apacheds/kerberos-ug/1.1.2-principals.html ============================================================================== --- websites/staging/directory/trunk/content/apacheds/kerberos-ug/1.1.2-principals.html (added) +++ websites/staging/directory/trunk/content/apacheds/kerberos-ug/1.1.2-principals.html Thu Feb 7 18:15:22 2013 @@ -0,0 +1,201 @@ + + + + + 1.1.2 - Principals — Apache Directory + + + + + + + + + + + + +
+ +
+
+ + + +
+
+ + + + + +

Principals

+

The Kerberos Principal is any entity to which the server can assign a Ticket. Typically, we can think of three kinds of Principals :

+
* Users
+* Services
+* hosts
+
+ + +

Each Principal is unique in the Kerberos database. This is the way we identify the entity.

+

A Kerberos Principal is a combinaison of three parts :

+
* the name (the primary)
+* an optional instance
+* the realm they are associated with
+
+ + +

The optional instance is used to provide more than one role to an entity, without having to create N Principal for a single user (an administrator is also a normal user, and it's good to qualify the user by adding his admin qualificiation in one Principal to create a new and easy to remember Principal)

+

The Principal syntax is the following :

+
<primary> ['/' <instance>]* '@' <realm>
+
+ + +

+For hosts, we use "host" as a primary, and the instances are the hostnames. +

+

Those are examples of valid Principals

+
john@APACHE.ORG
+john/admin@APACHE.ORG
+host/www.apache.org/apache.org@APACHE.ORG
+ldap/www.apache.org@APACHE.ORG
+
+ + + + + +
+
+
+ +
+ + \ No newline at end of file Modified: websites/staging/directory/trunk/content/apacheds/kerberos-user-guide.html ============================================================================== --- websites/staging/directory/trunk/content/apacheds/kerberos-user-guide.html (original) +++ websites/staging/directory/trunk/content/apacheds/kerberos-user-guide.html Thu Feb 7 18:15:22 2013 @@ -127,7 +127,7 @@
  • 1 - What is Kerberos