ACC Authentication

we try to use a single centralized account system where possible. This means that your account is the same, no matter which acc service you are using. For example this wiki and the cluster nodes share the same login.

Kerberos

We try to kerberize services. This allows you to login to different services without retyping your password. This includes ssh and webservices.

The kerberos realm is currently:

[realms]
ACC.GSI.DE = {
    kdc = dcw003.acc.gsi.de
    kdc = dcw004.acc.gsi.de
    admin_server = dcw003.acc.gsi.de
    admin_server = dcw004.acc.gsi.de
    default_domain = acc.gsi.de

You can lookup the current kdc and admin_servers by querying the srv records _kerberos._tcp.acc.gsi.de and _kpasswd._tcp.acc.gsi.de

-- ChristophHandel - 23 May 2018