On Mon, Jan 2, 2017 at 11:27 PM, Orion Poplawski <orion@xxxxxxxxxxxxx> wrote: > On 12/11/2016 05:34 PM, Dennis Gilmore wrote: >> * koji and the source lookaside were changed to use kerberos >> authentication >> instead of ssl certificates. All maintainers will need to: >> >> kinit YOUR-FAS-ACCOUNTNAME@xxxxxxxxxxxxxxxxxx >> >> to get a valid kerberos TGT and be able to authenticate to koji and >> the lookaside upload cgi. > > KDE users may find this useful - I've started using the newly packaged > kwalletcli to do: Cool, would be nice add it into wiki: https://fedoraproject.org/wiki/Infrastructure/Kerberos > > $ cat ~/.kde/Autostart/kinit.desktop > [Desktop Entry] > Comment[en_US]= > Comment= > Exec=bash -c 'kwalletcli -f Passwords -e orion@xxxxxxxxxxxxxxxxx | kinit > orion@xxxxxxxxxxxxxxxxx;kswitch -p my@xxxxxxxxxx' > GenericName[en_US]=Initialize Fedora Kerberos > GenericName=Initialize Fedora Kerberos > MimeType= > Name[en_US]=kinit > Name=kinit > Path= > StartupNotify=false > Terminal=false > TerminalOptions= > Type=Application > X-DBUS-ServiceName= > X-DBUS-StartupType= > X-KDE-SubstituteUID=false > X-KDE-Username= > name[en_US]=Kinit > > After storing the password in the wallet's "Passwords" directory under my > principal name. > > I find that I have to also kswitch back to my local principal for NFS to work > for me at work. > > -- > Orion Poplawski > Technical Manager 720-772-5637 > NWRA, Boulder/CoRA Office FAX: 303-415-9702 > 3380 Mitchell Lane orion@xxxxxxxx > Boulder, CO 80301 http://www.nwra.com > _______________________________________________ > devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx > To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx -- -Igor Gnatenko _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx