Support different keytab host domains
Opened this issue · 0 comments
celskeggs commented
Currently, our preprod cluster has a keytab for host/sapphire.mit.edu, whereas the domain for the supervisor is configured as sapphire.n.sipb.cloud. This means you have to change your external-domain setting to mit.edu in order to use kerberos access.
We should add support for specifically configuring the domain to use for kerberos authentication, because it reasonably might be different from our other names.