I'm considering to switch my intranet apps to Kerberos authentication.(currently NTLM but modules required are not maintained anymore and will in not work anymore once the web server is updated to newest release (Ubuntu)).
I'm completely new to this plus I'm not directly in my corporations IT department. It's a huge corporation and dealing with IT is a PITA. So my question also revolves around the fact if I need IT do something for me to make this work.
I can see on my company laptop using klist I have 3 tickets:
krbtgt/MYCOMPANY.COM@MYCOMPANY.COM
ldap/ldap.mycompany.com@MYCOMPANY.COM
and last one is for my laptop (eg. server = my laptop)
I alos already have a generic ldap user for querying ldap for authorization.
My question is if I can configure my web server to reuse the existing ldap ticket for authentication? And if yes how I would do that?