1

I want to design my own micro services framework - API lifecycle mgmt, service discovery and security. Authentication surely must be encryption based but how do we go about federating across two Kerberos realms?

Improve this question

1 Answer 1

Reset to default
1

Direct from the docs regarding Cross-realm Authentication

In order for a KDC in one realm to authenticate Kerberos users in a different realm, it must share a key with the KDC in the other realm. In both databases, there must be krbtgt service principals for realms. These principals should all have the same passwords, key version numbers, and encryption types.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .