Kerberos is a network authentication protocol.

learn more… | top users | synonyms

0
votes
1answer
21 views

/etc/hosts configuration error , ping not working

I am newbie to ubuntu plus kerberos , trying to configure kerberos in my vm ubuntu by i am not able to pass the step 2 in configuring hosts .below are the files. i am in the process of learning so ...
0
votes
1answer
39 views

What is AFS Kerberos used for? Can I safely remove it?

I'm trying to eliminate unused services that listen on open ports. My hope is to better secure my system. After running nmap I found only one service listening on port 7004 that I wasn't already ...
0
votes
0answers
29 views

Samba error when connecting to Active Directory

hoping someone can give me some insight into an error I'm getting. I'm trying to connect a Ubuntu workstation to Active Directory using Kerberos, Samba, and Winbind. When I run the kinit command, it ...
1
vote
0answers
26 views

Connect with an AD user to a ubuntu Machine

I try to log on under a ubuntu machine with an AD user via the GUI lightdm , but access is denied with "invalid password , please try again " My machine has been added in the AD : net ads join -U ...
0
votes
0answers
183 views

kerberos passwd: Authentication token manipulation error

(note - ignore the upgrade 15.10 bit, see "more info", below) I've just upgraded to Ubuntu 15.10 using the Live CD over an existing 14.04 version. Users that were configured before were lost from ...
1
vote
0answers
64 views

winbind and passwd issues

I successfully configured a Ubuntu 15.10 Workstation to authenticate against Active Directory. The only thing left so far is the ability to change the Active Directory password. When I enter the ...
0
votes
0answers
28 views

gubuntu 14 screensaver kerberos

It seems gubuntu 14.04.3 default screensaver don't renew the kerberos afs token. I've created the file /etc/pam.d/gnome-screensaver with: @include common-auth auth optional ...
0
votes
0answers
438 views

npm kerberos install issues

thanks for your time, this is the case, i have some problems when try to install kerberos nodejs package on my ubuntu 14.04 x64. This is the terminal output: khan@khan-Satellite-L645D:~$ npm install ...
0
votes
0answers
162 views

Replicate Microsoft Active Directory to Ubuntu Server

I finally installed MediaWiki on my Ubuntu server. Now I want my users to use the same password as for their windows login. The guide on the MediaWiki page tells that a LDAP server is needed. ...
1
vote
0answers
85 views

Kerberos TGT in default session gnome-keyring

I am using a 3rd party kerberos kit to authenticate to my work site. In RHEL/CentOS, my ticket is saved into the default session gnome-keyring; yet I am missing something with Ubuntu. When I kinit, ...
0
votes
2answers
396 views

mod_auth_kerb/apache 2.4 not authenticating for sub folders

I share subversion repositories using mod_dav_svn and Kerberos authentication mod_authz_kerb. All of this worked and recently it stopped. It authenticates the user for top level folder of the URL ...
0
votes
0answers
148 views

ssh not authenticating to kerberos

I am using my single PC as a ssh-client,ssh-server,kdc,admin-server. I am not using any of the virtual machines for this kerberos lab. I am connected to wife get the ip of 192.168.1.224 but i am using ...
0
votes
0answers
363 views

Kerberized NFS4 and Active Directory

I'm trying to use NFS4 on Ubuntu 14.04 LTS with Active Directory for user authentication, with Kerberos security, and I'm having trouble. When I mount with sec=sys, all works, but when I try to mount ...
-1
votes
0answers
2k views

Setting Up Active Directory With Samba4 & Kerberos

I am new to active directory and configuring domain controllers! I have followed this guide ( ...
1
vote
1answer
73 views

LDAP - benefits and challenges instead of local user management [closed]

I have been looking at LDAP + Kerberos for my setup. I am wondering what is the benefits and challenges with using LDAP + Kerberos instead of local user manangement. I know that LDAP can be used for ...
0
votes
1answer
4k views

Kerberos - Active Directory Domain Failure (Ubuntu)

I try to join Active Directory and Samba 4 in Ubuntu 12.04.05. When I run host -t SRV _kerberos._udp.test.sg I get the error: Host _kerberos._udp.test.sg not found: 3(NXDOMAIN) meanwhile $# host ...
1
vote
0answers
199 views

Hostname / VPN / NFS / Kerberos

At home I'm running Ubuntu Server 14.04.1 with Kerberised NFS Shares. The NFS clients obtain their full FDQN via DHCP. When away from home and trying to access NFS shares via VPN, Kinit fails with: ...
0
votes
1answer
157 views

Kerberos/NIS users require shadow hack

If I have a Ubuntu system to use Kerberos for authentication and NIS for information, users cannot log in unless I copy the content of my NIS shadow map to /etc/shadow. They get insta-rejected. If I ...
1
vote
0answers
399 views

I have a problem with domain trust between samba and AD

I configured Samba PDC and AD Domain. Here is my Topology. enter link description here And I saw that Samba PDC loading AD users. With "getent passwd" command and "wbinfo -ug" command. Here is my ...
1
vote
0answers
76 views

Kerberized NFSv4 no write permission

I have some trouble with installing NFSv4 with Kerberos. I can't write on my NFSv4-Share. That's my /etc/exports: /srv/export/ gss/krb5p(rw,fsid=0,no_subtree_check,async,no_root_squash) Thats ...
0
votes
4answers
4k views

SSSD password change not working with LDAP backend

Environment info: AD on win 2k8r2 Ubuntu 12.04.5 LTS SSSD v1.8.6 everything is in the same vlan I have an LDAP / SSSD solution in use on our Ubuntu servers. The auth process works correctly ...
3
votes
0answers
2k views

Samba Share not accessible with AD user

I try to install a samba server for active directory authentication and shares. I managed to configure kerberos (kinit klist works) I configured smb.conf. wbinfo -u wbinfo -g getent group *showing ...
1
vote
0answers
646 views

Where is krb5_util on Ubuntu 14.04?

The crucial krb5_util command (http://web.mit.edu/kerberos/krb5-latest/doc/admin/admin_commands/kdb5_util.html#kdb5-util-8) doesn't seem to be available on Ubuntu 14.04 although it ships with 1.12.x ...
5
votes
1answer
4k views

How do I configure a default principal for kinit (acquiring Kerberos ticket)?

When using kinit to acquire a Kerberos ticket I have configured it to use a default realm, e.g. GERT.LAN by editing /etc/krb5.conf: [libdefaults] default_realm = GERT.LAN That's great since ...
1
vote
1answer
87 views

What are the difference between maxlife and maxrenewlife in kerberos?

I want to know if I set maxlife to three day, but my ticket issued only a day. So I want t o know the difference between maxlife and maxrenewlife.
0
votes
1answer
53 views

Share directories with Active Directory users

I need to configure an Ubuntu, to share directories. The allowed users are in an Active Directory in Windows 2003 server. Can I use ntlm for that or only kerberos?
0
votes
1answer
1k views

Kerberos and google-authenticator (2-factor auth)

Does anyone know how can I use google-authenticator in combination with kerberos and thus provide to my users 2-factor authentication?
0
votes
1answer
356 views

How to make sshd create non-existing user when using kerberos?

I am setting my sshd to use kerberos auth. Everything was fine until I actually login via ssh. I got invalid user. If I added the account to the server running sshd, then I could login using password ...
0
votes
1answer
169 views

kerberos ticket watcher

I just switched from openSuSe to Ubuntu 12.04. At work we use kerberos to auth to different systems. In openSuSe I had a nice little tray app "kerberos ticket watcher" that could renew and initialise ...
2
votes
1answer
6k views

Samba share not accessible from Windows 7 (on domain) via hostname

I have spent several days attempting to solve this- none of the answers on this forum or any other were able to help. I tried everything. I read the entire Samba manual. Nothing worked. Happily, I ...
1
vote
1answer
2k views

authentication method for likewise to join a domain

I installed likewise and joined my an active directory domain. I'm finding it's a bit unclear on how the default authentication works. Do I have to do any extra configuration to enable kerberos? If I ...
1
vote
1answer
1k views

Ubuntu : Kerberos With LDAP

I am using ubuntu 12.04. I am installing LDAP with Kerberos authentication. I followed the steps in the ubuntu documentation. https://help.ubuntu.com/12.04/serverguide/kerberos-ldap.html After ...
0
votes
1answer
241 views

Password not accepted at login

I had tried to setup kerberos authentication to log into some ADS thing at my new university, however that didn't work and resulted in me having to enter my password twice for everything. So I did: ...
0
votes
1answer
442 views

krb5-multidev, libk5crypto3, libk5crypto3:i386 package dependency

Using Ubuntu 12.04 Asus U43F I can no longer update, install or remove packages via software center because of package dependency errors. sudo apt-get install -f reads the following: Reading ...
0
votes
0answers
33 views

unmet dependencies+I cannot update anymore [duplicate]

Possible Duplicate: When trying to upgrade Kerberos development libraries, why do I get an “unmet dependencies” error? The following packages have unmet dependencies: ...
1
vote
1answer
429 views

Kerberos with Active Directory

So I've setup kerberos on Ubuntu in various ways (likewise-open, winbind, etc) and keep coming up with the same problem. kinit works fine and I get the initial ticket, but when I try to access a proxy ...
2
votes
1answer
209 views

“AND Operator” in PAM

I need to prevent users from authenticating through Kerberos when the encrypted /home/users has not yet been mounted. (This is to avoid corrupting the ecryptfs mountpoint) Currently I have these ...
10
votes
2answers
13k views

rails & libpq-dev nasty dependencies

I don't know if this question belongs here, but I'll take a shot. Hi. I'm running ubuntu 11.10 dual-boot with windows vista on my machine. On Ubuntu, I've installed RVM, rails gem, & PostgreSQL ...
1
vote
1answer
5k views

Kerberos SSO with Apache - Partly works

Ok... I've got my Apache server running, and I have Kerberos configured to integrate with our primary domain controller (Windows 2003). When I try to access my page, however, I get a login ...
17
votes
1answer
2k views

Setup for mounting kerberized nfs home directory - gssd not finding valid kerberos ticket

Our home directories are exported via kerberized nfs, so the user needs a valid kerberos ticket to be able to mount its home. This setup works fine with our existing clients & server. Now we want ...