summaryrefslogtreecommitdiff
path: root/README.md
diff options
context:
space:
mode:
authorMarkus Krogh <markus@nordu.net>2019-02-07 11:11:53 +0100
committerMarkus Krogh <markus@nordu.net>2019-02-07 11:11:53 +0100
commit7f437db53b49339615bbad9813e8beee522de493 (patch)
tree41fc0b15ea5d91141620d30ec8194845b23da3ab /README.md
parent51d49d000e012a99726057998dfb9fcc6c3e743c (diff)
Use kinit and kadmin directly rather than perl script
Diffstat (limited to 'README.md')
-rw-r--r--README.md7
1 files changed, 4 insertions, 3 deletions
diff --git a/README.md b/README.md
index d7ca4a9..88e12e1 100644
--- a/README.md
+++ b/README.md
@@ -39,12 +39,13 @@ The only required variable is the `LDAP_PASSWORD`
- LDAP_PORT - defaults to `636`
- LDAP_USER - defaults to `cn=admin,dc=nordu,dc=net`
- LDAP_PASSWORD
-- CHANGEPW_SCRIPT - `/opt/scripts/create-kdc-principal.pl`
+- KRB5_PRINCIPAL - defaults to `pwman`
+- KRB5_KEYTAB - defaults to `keytabs/pwman.keytab`
+- KRB5_REALM - defaults to `NORDU.NET`
- CSRF_SECRET - random 32 characters (including specials)
- ADDRESS - sets the address the pwman server will listen on - `:3000`
- BASE_PATH - Pwman should reside under e.g. `/sso`
- PWNED - path to pwned passwords v2 file
-- KRB5_CONFIG - path to krb5.conf file
Primarily development variables:
@@ -67,7 +68,7 @@ For rapid testing that does not need to build docker images you can choose to ju
docker-compose up
# In another (hacky since it is not under gopath)
-go run !(*_test).go -ldap-password secretpw -ldap-port 6636 -ldap-ssl-skip-verify -csrf-insecure -krb5-config dev/krb5.conf -changepw-script data/pwman/log-principal.pl -base-path /dev
+go run !(*_test).go -ldap-password secretpw -ldap-port 6636 -ldap-ssl-skip-verify -csrf-insecure -base-path /dev
# You can now access it on http://localhost/dev
```