Kerberos Web GUI login?

[Pegasus]

Hello.

I run a Kerberos realm for single sign-on and wanted to know if it's possible to configure Proxmox to allow a Kerberos user to log in to the Web interface with admin rights to the Proxmox machine/cluster? I tried using Active Directory and just put in the Kerberos details (Realm=DOMAIN.COM, server=kerberos.domain.com, etc.) but that doesn't seem to work as I get a login failure and the KDC doesn't log any requests from the Proxmox machine. Since I have set PAM up to use Kerberos too, I can just add the user name to the list and choose pam for the realm, but I'm not sure this is the best option.

 

[dietmar]

I can just add the user name to the list and choose pam for the realm, but I'm not sure this is the best option.

Yes, I guess that is the way to go.

 

[dimovstanimir]

I was able to add the realm to proxmox and I can login with my AD user, but I am not able to make the SSO. Every time I open the proxmox URL I get the login windows and my idea is to be able to login without typeing my username and password and only the fact that I am logged in with my username in my workstation in my domain to be sufficient for the Proxmox not to present me with the login page but directly to log me in. Do you think that this is possible?