Tell me more ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.
up vote 1 down vote favorite

I am trying to configure PAM with LDAP and Kerberos for authentication. Command id <username> is working fine so LDAP seems to be working fine and also kinit is working (followed by klist) and so Kerberos also seems to be working. But during login authentication, i am getting the following error in /var/log/auth.log file

Aug  1 16:41:25 vanaspati login[2117]: pam_krb5(login:auth): (user cs5090243) credential verification failed: KDC returned error string: NO PREAUTH
Aug  1 16:41:25 vanaspati login[2117]: pam_krb5(login:auth): authentication failure; logname=cs5090243 uid=0 euid=0 tty=/dev/pts/1 ruser= rhost=
Aug  1 16:41:25 vanaspati login[2117]: pam_unix(login:auth): authentication failure; logname=root uid=0 euid=0 tty=/dev/pts/1 ruser= rhost=  user=cs5090243
Aug  1 16:41:25 vanaspati login[2117]: pam_ldap: could not open secret file /etc/ldap.secret (No such file or directory)
Aug  1 16:41:25 vanaspati login[2117]: pam_ldap: error trying to bind as user "uid=cs5090243,ou=a,dc=b,dc=c,dc=d,dc=e" (Invalid credentials)
share|improve this question
1  
Solved. I had to set -requires_preauth for all the nfs kerberos principles. – Jatin Kumar Aug 2 '12 at 13:54

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.