Kerberos is a network authentication system based on shared key cryptography. It is the underlying authentication system used by current versions of Active Directory and is widely used by large organizations.

learn more… | top users | synonyms

0
votes
2answers
31 views

How can I install kerberised services on debian?

I installed kerberos in my debian environment and made it work with SSH. I also would like to try it with other services but I could not install them on debian. I followed several tutorials e.g. ...
1
vote
1answer
806 views

Apache mod_auth_kerb: “Key table entry not found”

I want to use the Apache Module "mod_auth_kerb" to implement SSO for a Webapplication. With the following config: <VirtualHost 10.5.3.200:443> #Proxy <Proxy *> Order deny,allow Allow ...
1
vote
1answer
154 views

Is it possible to attach `kinit` to the first attempt to `ssh` without a Kerberos ticket?

My university uses Kerberos-based authentication for login to our unix servers. One way to get passwordless login is to run kinit, type my password, and then run ssh@host. For this setup, I do the ...
1
vote
1answer
249 views

kdb5_ldap_util fails with cryptic error

Supposedly, in order to set up Kerberos, I need to run kdb5_ldap_util, though I'm not sure why. However, it fails with: # kdb5_ldap_util -D cn=admin,dc=example,dc=com create -subtrees ...
1
vote
1answer
118 views

kinit returns error salt type 3 unsupported on FreeBSD 9.1-RELEASE install

When attempting to run kinit to log into a Kerberos V5 realm I get the following error on a default install FreeBSD 9.1-RELEASE kinit: krb5_get_init_creds: salt type 3 not supported Any ideas?
0
votes
1answer
165 views

How to automate ktutil to immediately list keytab entries?

I use MIT ktutil a lot on Linux and I am fed up using the following sequence, even if command shortcuts and file name completion are here to help: ktutil rkt my.keytab l Isn't there a way to get ...
3
votes
0answers
176 views

Kerberos Forwarding in SSSD

So, I'm trying to set up forwarding with Kerberos and seem to have some problems. On some of my servers I'm able to forward after receiving a ticket; however, some I'm not. My system setup is a ...
1
vote
0answers
108 views

Utilizing Samba Shares Without using Winbind

I am curious if it is possible to use samba shares without using winbind. In our current environment we are using SSSD, Kerberos, and Samba to complete the required tasks such as joining the windows ...
1
vote
0answers
49 views

kerberos : kinit not picking up updated values in krb5.conf

We are running kinit from our Linux command line and this works well. Before we run kinit we set the KRB5_CONFIG environment variable to point to directory continaing krb5.conf file linuxhost1$ ...
1
vote
0answers
948 views

How to set up Active Directory authentication on CentOS 6.5?

I have: 1. A CentOS machine to which I have SSH and STFP access. 2. The machine is on network where there is a MS SQL Server database and Windows shared drives. 3. All authentication seems to be with ...
1
vote
0answers
265 views

How is a username determined and can I hide the domain component in a winbind username?

Someone asked a question on Server Fault about a problem which I'm also having but no one has answered it so I'm posing a slightly different question to try and figure it out myself. I've configured ...
1
vote
0answers
77 views

How to obtain current user environment in pam_script?

I'm running pam_script after pam_krb5 with a session open script. In my script, I need to use the ticket cache generated by krb5 to do something. Well, the script was actually run as root, and ...
1
vote
0answers
99 views

How do I setup kerberos authetication in Fedora 19

I cannnot seem to find documentation on setting up Kerberos authentication on my Fedora 19 workstation. Which files and programs are involved? My Kerberos server is a corporate AD.
1
vote
0answers
375 views

tmp/krb5cc_[uid] is not getting purged regularly (kerberos credentials cache)

An ftp id wasn't able to authenticate itself using kerberos because it wasn't able to create /tmp/krb5cc_[uid]. This was caused because /tmp ran out of inode space, as there were innumerbale (don't ...
0
votes
0answers
6 views

Where are AFS tokens stored, and how do I get them into running Screen session

I have the following situation, I have a running GNU screen session where I can't access AFS anymore - my token has expired. I can however access it from a new shell. The difference to this question ...
0
votes
0answers
11 views

GSS-API error - only on one client authenticating to Kerberos

When authenticating to kadmin with one client of many, it fails with kadmin: GSS-API (or Kerberos) error while initializing kadmin interface. The Kerberos host is specified with its subnet ...
0
votes
0answers
75 views

RSAT : Samba 4 Server not operational

Samba 4 now supports GPO and management through the Active Directory Windows console. But, when I open it after installation, I cannot access the server nor the domain. The message returned is that ...
0
votes
0answers
33 views

Automatically creating windows shares when logging on to CentOS7

I am in charge of researching the suitability of deploying CentOS 6 or 7 to around 200-400 macs in a triple boot (OSX,Win7,CentOS 6or7) configuration. We currently dual boot Win7 & OSX using ...
0
votes
0answers
178 views

Why do I get a “preauth required” error when I set “require-preauth = false” in krb5.conf?

On an OS X machine, I'm trying to get a kerb ticket on my organization's kerberos realm. I grabbed a copy of krb5.conf from a Linux machine to make sure my kerberos configuration was correct. I tried ...
0
votes
0answers
99 views

Why would SSH server not accept forwarded Kerberos ticket?

I have an environment where I can SSH in using forwarded Kerberos credentials (using ASP.NET delegation), however in another I cannot. I have GSSAPIAuthentication yes in the ~/.ssh/config on each ...