From 75518c7888adf5c4094de849c853904750b844c9 Mon Sep 17 00:00:00 2001 From: Marcia Ramos Date: Thu, 18 Aug 2016 04:31:31 +0000 Subject: [PATCH] Update kerberos.md - EE features --- doc/integration/kerberos.md | 16 ++++++++++++++-- 1 file changed, 14 insertions(+), 2 deletions(-) diff --git a/doc/integration/kerberos.md b/doc/integration/kerberos.md index 44d1d8f9929261..bbc1d259e1a6f8 100644 --- a/doc/integration/kerberos.md +++ b/doc/integration/kerberos.md @@ -1,6 +1,16 @@ # Kerberos integration -GitLab can be configured to allow your users to sign with their Kerberos credentials. +## Overview + +[Kerberos][kerb] is a secure method for authenticating a request for a service in a +computer network. Kerberos was developed in the Athena Project at the +[Massachusetts Institute of Technology (MIT)][mit]. The name is taken from Greek +mythology; Kerberos was a three-headed dog who guarded the gates of Hades. + +## Use-cases + +- GitLab can be configured to allow your users to sign with their Kerberos credentials. +- You can use Kerberos to [prevent][why-kerb] anyone from intercepting or eavesdropping on the transmitted password. ## Configuration @@ -9,7 +19,6 @@ following prerequisites. You still need to configure your system for Kerberos usage, such as specifying realms. GitLab will make use of the system's Kerberos settings. - ### GitLab keytab 1. Create a Kerberos Service Principal for the HTTP service on your GitLab server. @@ -226,3 +235,6 @@ to a larger value in [the NGINX configuration][nginx]. [restart gitlab]: ../administration/restart_gitlab.md#installations-from-source [reconfigure gitlab]: ../administration/restart_gitlab.md#omnibus-gitlab-reconfigure [nginx]: http://nginx.org/en/docs/http/ngx_http_core_module.html#large_client_header_buffers +[kerb]: https://web.mit.edu/kerberos/ +[mit]: http://web.mit.edu/ +[why-kerb]: http://web.mit.edu/sipb/doc/working/guide/guide/node20.html -- GitLab