I need scripts for installation/configuration and backup/restore of MIT kerberos on fresh-installed fedora 10 with latest updates applied. It should support following usage scenarios:
1. Remote user logs in using pkcs#11 smartcard. He can access apache web resources, ssh, email server, etc. using SSO.
2. Service obtains an access to a remote host over ssh, e.g. for performing remote backup.
Deliverables should be scripts and configuration files for
- kerberos server itself
- user pc
Please note, that kerberos intallation you'll do should support certificate-based authentication. I have PKI solution set up already so I would like to use it.
Deliverables should be well documented. Good documentation style is adding references to (preferrably official) documentation explaining why specific action/choice was taken, while putting the effort to present a translation to human language of self-explanatory code is almost of no use. The aim of documenting the deliverables is to save time for admin and scripts maintainer by helping them to understand FAST all aspects involved in specific actions/decision process.
You'll also need to document how to perform basic kerberos admin tasks like adding a user, granting permissions, etc.
The scripts should be configurable via command-line arguments or separate configuration file and require no human intervention (where possible) to do theirs work.
Please ask if you need more fine-grained details.
Please test the deliverables before sending them to me, do not submit the ones which are buggy.
Please note, that I'm looking for a person who know well how to configure MIT kerberos. We estimate the effort required for experienced person to do the job as 2-3 hours. Those who say it is over 4h work obviously do not understand the project or simply do not have any practical experience required for the project. So please be reasonable.