Kerberos is a network authentication system based on shared key cryptography. It is the underlying authentication system used by current versions of Active Directory and is widely used by large organizations.

learn more… | top users | synonyms

0
votes
2answers
24 views

How can I install kerberised services on debian?

I installed kerberos in my debian environment and made it work with SSH. I also would like to try it with other services but I could not install them on debian. I followed several tutorials e.g. ...
1
vote
1answer
130 views

Is it possible to attach `kinit` to the first attempt to `ssh` without a Kerberos ticket?

My university uses Kerberos-based authentication for login to our unix servers. One way to get passwordless login is to run kinit, type my password, and then run ssh@host. For this setup, I do the ...
1
vote
1answer
237 views

kdb5_ldap_util fails with cryptic error

Supposedly, in order to set up Kerberos, I need to run kdb5_ldap_util, though I'm not sure why. However, it fails with: # kdb5_ldap_util -D cn=admin,dc=example,dc=com create -subtrees ...
1
vote
1answer
115 views

kinit returns error salt type 3 unsupported on FreeBSD 9.1-RELEASE install

When attempting to run kinit to log into a Kerberos V5 realm I get the following error on a default install FreeBSD 9.1-RELEASE kinit: krb5_get_init_creds: salt type 3 not supported Any ideas?
0
votes
1answer
135 views

How to automate ktutil to immediately list keytab entries?

I use MIT ktutil a lot on Linux and I am fed up using the following sequence, even if command shortcuts and file name completion are here to help: ktutil rkt my.keytab l Isn't there a way to get ...
0
votes
1answer
753 views

Apache mod_auth_kerb: “Key table entry not found”

I want to use the Apache Module "mod_auth_kerb" to implement SSO for a Webapplication. With the following config: <VirtualHost 10.5.3.200:443> #Proxy <Proxy *> Order deny,allow Allow ...
2
votes
0answers
162 views

Kerberos Forwarding in SSSD

So, I'm trying to set up forwarding with Kerberos and seem to have some problems. On some of my servers I'm able to forward after receiving a ticket; however, some I'm not. My system setup is a ...
1
vote
0answers
100 views

Utilizing Samba Shares Without using Winbind

I am curious if it is possible to use samba shares without using winbind. In our current environment we are using SSSD, Kerberos, and Samba to complete the required tasks such as joining the windows ...
1
vote
0answers
42 views

kerberos : kinit not picking up updated values in krb5.conf

We are running kinit from our Linux command line and this works well. Before we run kinit we set the KRB5_CONFIG environment variable to point to directory continaing krb5.conf file linuxhost1$ ...
1
vote
0answers
937 views

How to set up Active Directory authentication on CentOS 6.5?

I have: 1. A CentOS machine to which I have SSH and STFP access. 2. The machine is on network where there is a MS SQL Server database and Windows shared drives. 3. All authentication seems to be with ...
1
vote
0answers
255 views

How is a username determined and can I hide the domain component in a winbind username?

Someone asked a question on Server Fault about a problem which I'm also having but no one has answered it so I'm posing a slightly different question to try and figure it out myself. I've configured ...
1
vote
0answers
76 views

How to obtain current user environment in pam_script?

I'm running pam_script after pam_krb5 with a session open script. In my script, I need to use the ticket cache generated by krb5 to do something. Well, the script was actually run as root, and ...
1
vote
0answers
99 views

How do I setup kerberos authetication in Fedora 19

I cannnot seem to find documentation on setting up Kerberos authentication on my Fedora 19 workstation. Which files and programs are involved? My Kerberos server is a corporate AD.
1
vote
0answers
354 views

tmp/krb5cc_[uid] is not getting purged regularly (kerberos credentials cache)

An ftp id wasn't able to authenticate itself using kerberos because it wasn't able to create /tmp/krb5cc_[uid]. This was caused because /tmp ran out of inode space, as there were innumerbale (don't ...
0
votes
0answers
47 views

RSAT : Samba 4 Server not operational

Samba 4 now supports GPO and management through the Active Directory Windows console. But, when I open it after installation, I cannot access the server nor the domain. The message returned is that ...
0
votes
0answers
33 views

Automatically creating windows shares when logging on to CentOS7

I am in charge of researching the suitability of deploying CentOS 6 or 7 to around 200-400 macs in a triple boot (OSX,Win7,CentOS 6or7) configuration. We currently dual boot Win7 & OSX using ...
0
votes
0answers
157 views

Why do I get a “preauth required” error when I set “require-preauth = false” in krb5.conf?

On an OS X machine, I'm trying to get a kerb ticket on my organization's kerberos realm. I grabbed a copy of krb5.conf from a Linux machine to make sure my kerberos configuration was correct. I tried ...
0
votes
0answers
92 views

Why would SSH server not accept forwarded Kerberos ticket?

I have an environment where I can SSH in using forwarded Kerberos credentials (using ASP.NET delegation), however in another I cannot. I have GSSAPIAuthentication yes in the ~/.ssh/config on each ...