[Ovirt-devel] oVirt console (again!)

[Gerd Hoffmann]

Gerd Hoffmann wrote:
> Richard W.M. Jones wrote:
>> The problem, as ever, is with Windows.  It's hard to set up a Windows
>> client as a Kerberos client, so this won't just work.

> Might be worth talking to the freeipa/samba folks maybe whenever it is
> possible to make windows play nice here?

Some doc reading and experiments later ...

With MIT Kerberos for Windows installed the Windows machine can
authenticate against freeipa.  Setup is pretty straight forward and
described at the freeipa website.

Requires that the applications support gssapi though.  Firefox can
handle both ways (sspi == native windows with ADC, gssapi == MIT).

To get the WUI on a windows box this must be setup anyway.  Then have
libvirt auth via MIT-gssapi too should work nicely and probably without
too much coding effort as gssapi at linux code is there already ...

cheers,
  Gerd