Skip to content

smart proxy

marten edited this page Feb 13, 2017 · 27 revisions

#Setup

git clone https://github.com/martencassel/smart-proxy
cd smart-proxy
git branch -a
git checkout 4917_ad_realmprovider
gem install radcli
yum -y install ruby
yum -y install augeas-devel libvirt-devel
bundle

Test

rake test

Start

cd /home/marten/smart-proxy
bundle exec bin/smart-proxy
Do basic setup of proxy server at config/settings.yml
settings.yml

settings.yml

:bind_host: '*'
:http_port: 8000
:log_file: /var/log/foreman-proxy/proxy.log
mkdir -p /var/log/foreman-proxy
> ktutil
  ktutil:  addent -password -p [email protected] -k 1 -e rc4-hmac
  Password for [email protected]: [enter your password]
  ktutil:  addent -password -p [email protected] -k 1 -e aes256-cts
  Password for [email protected]: [enter your password]
  ktutil:  wkt ad.keytab
  ktutil:  quit
mkdir /etc/foreman-proxy
chown marten.marten /etc/foreman-proxy
kinit [email protected] -k -t /etc/foreman-proxy/ad.keytab

Create new realm entry

curl -d 'hostname=host.example.com' http://localhost:8000/realm/EXAMPLE.COM

Recreate realm entry (revokes keytab, etc)

curl -d 'hostname=host.example.com&rebuild=true' http://localhost:8000/realm/EXAMPLE.COM

Deletes new realm entry

curl -XDELETE http://localhost:8000/realm/example.com/host.example.com
Clone this wiki locally