You are here

Enhancement of wallet to support keytabs

Project ID: 
174
Current stage: 
Manager: 
Unit: 
What: 

Description:

Project 129 - Wallet Implementation provided a wallet system which supports SSH host keys and X.509 certificates, but - owing to the conclusions of the evaluation stage - not keytabs.

When Prometheus is operational, the wallet implementation should be extended to support keytabs corresponding to principals whose lifecycle is managed by that system, and which are required for special purposes, e.g. service/host principals; 'entity/identity' principals authorised for long-running jobs; etc.

Deliverables: Automatically managed keytabs

Why: 

Customer: All CO's; any user who requires a keytab for any special purpose, e.g. a long-running job.

Case statement: As for the precursor Wallet Implementation project.

When: 

Status:

Timescales: Wallet itself is fairly well understood, but it's likely to take a bit of effort to get up to speed on the Prometheus interface. Estimate 4-6 weeks?

Priority:

Time:

How: 

Proposal:

Resources:

Plan:

Other: 

Dependencies:

Risks:

Milestones

Proposed date Achieved date Name Description