Trying to setup kerberos authentication with 389-ds and having trouble figuring out how the two fit together.
Here is my setup:
- A CentOS 6 VM (
centos01) where I setup bind, 389 ds, and kdc services
- A Fedora 17 VM (
fedora01) - I want to authenticate to the CentOS box from this VM using a user account in the LDAP database on
I used the "authentication" gui on the Fedora VM and it looks like it configured
/etc/nsswitch.conf for me.
Following the 389 docs, I setup the kdc server on
centos01 and copied the
Now, confirming Kerberos is working, from
fedora01 I can enter kadmin with a use principals I've created successfully.
I can also run
fedora01 with simple authentication and successfully query the LDAP database on
centos01 like this:
ldapsearch -x -b 'dc=lab2,dc=local'. But what do I do next?
From this point what do I have to do to be able to interactively login to
fedora01 with an LDAP user account?
(PS: I know freeIPA pretty much does all this for you, but I wanted to build it out myself for learning purposes)