20 Commits

Author SHA1 Message Date
James E. Blair
cfc1841c06 Add warning about kerberos key rotation
Change-Id: I9e4caf8feeb775c02208a5e5f1627f03a90e4211
2020-01-31 16:22:52 -08:00
Monty Taylor
d500651367 Rename cgit_file to git_file
In sphinx, we have a :cgit_file: directive that makes links to files.
Thing is - we're not using cgit anymore. So just rename it to git_file.

Change-Id: I80aca5fb3cc84281e29843944fea33e6f4d9fe6f
2019-04-22 11:47:11 +00:00
Monty Taylor
eaa74543de Finish updating docs for opendev
The zuul and zuulv3 docs need to be merged, but that seemed like
too much for this. Also, the 3rd party CI doc is out of date, but
in this patch only removed sections that linked to docs or files
that don't exist anymore.

Change-Id: Ie5497edd762d2146165608f3227b0bac88a913df
2019-04-20 18:25:37 +00:00
Zuul
b735f2d478 Merge "Document kerberos stash file requirement" 2019-03-01 18:15:25 +00:00
Clark Boylan
9c465131db Make kdc03 the master kerberos kdc and admin server
This change will convert kdc03 to a master from a hot standby and will
remove kdc01 from management.

Cutover plan:
  Disable kdc01 in ansible emergeny file
  Stop run-kprop cron on kdc01
  Stop kadmind on kdc01
  Execute run-kprop.sh on kdc01
  Merge this change
  Wait for puppet to convert kdc03 to the master
  Confirm that run-kprop works from kdc03 to kdc04
  Update dns records as documented in our kerberos docs
  Test kadmin works
  Delete old kdc01 server

Change-Id: Ib14b11fa1f0a6bc11b0f615ce5b6f6be214b5629
2019-02-22 15:47:49 -08:00
Clark Boylan
b1b4c1e70d Document kerberos stash file requirement
This adds a piece of missing documentation for running kerberos KDC
servers.

Change-Id: Iac1ffec96ec459ac5856dcdf0fbb2c83224acdb4
2019-02-22 14:28:21 -08:00
Clark Boylan
452760a49c Add kdc03.openstack.org
This new Xenial server is being added as a kerberos standby node but
will be used to replace kdc01 as the master once fully configured and
happy as a standby. This replaces the old trusty server.

Note that the server wasn't added to opendev.org as we don't have a
kerberos realm for that domain so that would be a separate activity for
the future.

Change-Id: I4cc5fcd7504c98a7bcd9dc4f2ad57bb5bf8b54bd
2019-02-22 10:30:57 -08:00
François Magimel
46260a79ee Fix spelling mistakes and reST typos in the doc
Change-Id: I61d9780f3f1937c6e8d326a670c40fb6a931dbce
2018-12-08 19:13:53 +01:00
Ian Wienand
882b730fdf Update to openstackdocstheme
This modernises the openstack-infra documentation by switching to
openstackdocstheme.  Update dependencies as required.

To remove non-relevant stuff from conf.py, I have just taken the demo
file from openstackdocstheme and lightly modified it.

It seems later sphinx has included it's own ":file:" role which now
conflicts.  Change it it ":cgit_file:" in our documentation.  Remove
the custom header template which no longer applies.  Add the
post-2.0-pbr sphinx-based warning-as-error, which fixes the original
problem that I actually noticed that errors could slip through the
gate tests :)

Change-Id: Ic7bec57b971bb4c75fc839e7269d1f69a576b85c
2018-06-25 11:19:43 +10:00
Jeremy Stanley
f4bc2917ef Document Kerberos password reset process
As happens, if you don't use your Kerberos credentials often you may
lose track of your password for them. Document how, as a system
administrator with a shell on one of the KDCs, you can set a new
passwords for your accounts without needing to recreate the
principals.

Change-Id: I843b5be9630c805335a6cca04237477002748242
2018-06-06 16:06:44 +00:00
Paul Belanger
3ee34cf491
Remove kdc02.o.o (replaced by kdc04.o.o)
We no longer need kdc02.o.o (ubuntu trusty), now that kdc04.o.o
(ubuntu xenial) is online.

Change-Id: I92b879f7a233dc81c0d64153b293ac12f7e72a40
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
2017-12-18 15:30:30 -05:00
James E. Blair
faa31fa404 Add kerberos / afs dns info
Change-Id: Id2cc43f1d67584ac26709d61679b3c6659df8daa
2017-12-15 08:24:26 -08:00
Clark Boylan
e6806ff32d Add kerberos maintenance docs
This adds docs on how to perform maintenance on the kerberos service
without a service outage.

Change-Id: Ie98bcfa952825d5102c21bbf1efda499307fb88a
2017-04-14 11:16:40 -07:00
venkatamahesh
fbafc20189 Fix spell typos
Change-Id: I70fa2cc7e2fd35895cd11db57fef00199680ce2b
2016-02-04 06:21:20 +05:30
James E. Blair
32516012f0 Document adding a kerberos service principal
Change-Id: I6f10a400411220031864546ea82319373d9a965b
2016-01-21 08:09:44 -08:00
Elizabeth K. Joseph
11a9b7ccce Update documentation with new Puppet modules
Location of our Puppet modules has changed now that they are split
from system-config, update documentation accordingly.

Change-Id: I4d4adc5d41f50dd92fbd642ac30f95c327a416b2
2015-01-28 19:48:10 -08:00
Jenkins
39503037f0 Merge "Add AFS docs" 2014-12-12 17:11:39 +00:00
Michael Krotscheck
bdd6abcac8 Switched documentation to point to storyboard.
We've migrated this project to storyboard, I'm updating the
documentation links.

Change-Id: Id92552b7be7cd43ca6a3ec91c2c4f330078490b6
2014-11-12 14:48:02 -08:00
James E. Blair
3f2923671c Add AFS docs
Change-Id: I11a5e13a9aca71ea1368b6e9df61a606ea3746c3
2014-11-02 15:06:01 +00:00
Monty Taylor
d33895f3b1 Add Kerberos config
Step one in an AFS cell is getting kerberos working. This does not
provide end-to-end KDC management - the realm still needs to be
created by hand.

Change-Id: I891d784d676ab79e7aca9c883dd9e705a30db6e5
2014-10-20 15:13:14 -05:00