HTTPS proxy configuration

@@ -83,25 +81,25 @@ is available in the python package index.

Configuring the clients

To use an HTTPS proxy, a client host must trust the CA which issued -that proxy’s SSL certificate. If that CA’s certificate is not in the +that proxy’s SSL certificate. If that CA’s certificate is not in the system-wide default set of trusted certificates, configure the -following relation in the client host’s krb5.conf file in -the appropriate [realms] subsection:

-
http_anchors = FILE:/etc/krb5/cacert.pem
+following relation in the client host’s krb5.conf file in
+the appropriate [realms] subsection:

+
http_anchors = FILE:/etc/krb5/cacert.pem
 

 

 
Adjust the pathname to match the path of the file which contains a
-copy of the CA’s certificate.  The http_anchors option is documented
-more fully in krb5.conf.

+copy of the CA’s certificate.  The http_anchors option is documented
+more fully in krb5.conf.

 
Configure the client to access the KDC and kpasswd service by
-specifying their locations in its krb5.conf file in the form
+specifying their locations in its krb5.conf file in the form
 of HTTPS URLs for the proxy server:

-
kdc = https://server.fqdn/KdcProxy
-kpasswd_server = https://server.fqdn/KdcProxy
+
kdc = https://server.fqdn/KdcProxy
+kpasswd_server = https://server.fqdn/KdcProxy
 

 

 
If the proxy and client are properly configured, client commands such
-as kinit, kvno, and kpasswd should all function normally.

+as kinit, kvno, and kpasswd should all function normally.

 

 

 
@@ -128,6 +126,7 @@ as kinit, Configuration Files
 
  • Realm configuration decisions
    • 
 
  • Database administration
    • 
+
  • Database types
    • 
 
  • Account lockout
    • 
 
  • Configuring Kerberos with OpenLDAP back-end
    • 
 
  • Application servers
    • 
@@ -135,11 +134,11 @@ as kinit, Backups of secure hosts
 
  • PKINIT configuration
    • 
 
  • OTP Preauthentication
    • 
+
  • SPAKE Preauthentication
    • 
+
  • Addressing dictionary attack risks
    • 
 
  • Principal names and DNS
    • 
 
  • Encryption types
    • 
-
  • HTTPS proxy configuration
      
-
    
-
    • 
+
  • HTTPS proxy configuration
    • 
 
  • Authentication indicators
    • 
 
  • Administration  programs
    • 
 
  • MIT Kerberos defaults
    • 
@@ -176,8 +175,8 @@ as kinit, 
         
    
-            
    Release: 1.16
    
-                © Copyright 1985-2017, MIT.
+            
    Release: 1.21.1
    
+                © Copyright 1985-2023, MIT.
             
    
             
    
                 
-- 
cgit v1.3