My client wants to implement Kerberos Authentication on multiple Oracle Linux Boxes. Do they need to be done manually or can I implement on all of them using any script? Is there any way to script this and enable the authentication on all the servers at the same time?
Answer
It depends on the requirement, but it seems to me that scripting might be the wrong approach.
If they are using “Oracle Linux Boxes” we can assume that it will be a kind of RHEL based system, likely a version 7.
Kerberos is often used for authentication only, and most of the time combined with a directory (e.g. active directory, ldap, …).
FreeIPA can be a solution to get that done, but often sssd only configured appropriately can be sufficient. FreeIPA offers deeper system integration and many interesting features, but is also more complex.
Since the requirement was not very clear, it is essential to state that the answer is related to Linux System integration, mainly PAM.
Attribution
Source : Link , Question Author : Pallab , Answer Author : hargut
