Kerberos is a network authentication protocol.

learn more… | top users | synonyms

0
votes
0answers
73 views

kerberos passwd: Authentication token manipulation error

(note - ignore the upgrade 15.10 bit, see "more info", below) I've just upgraded to Ubuntu 15.10 using the Live CD over an existing 14.04 version. Users that were configured before were lost from ...
1
vote
0answers
33 views

winbind and passwd issues

I successfully configured a Ubuntu 15.10 Workstation to authenticate against Active Directory. The only thing left so far is the ability to change the Active Directory password. When I enter the ...
0
votes
0answers
24 views

gubuntu 14 screensaver kerberos

It seems gubuntu 14.04.3 default screensaver don't renew the kerberos afs token. I've created the file /etc/pam.d/gnome-screensaver with: @include common-auth auth optional ...
0
votes
0answers
386 views

npm kerberos install issues

thanks for your time, this is the case, i have some problems when try to install kerberos nodejs package on my ubuntu 14.04 x64. This is the terminal output: khan@khan-Satellite-L645D:~$ npm install ...
0
votes
0answers
99 views

Replicate Microsoft Active Directory to Ubuntu Server

I finally installed MediaWiki on my Ubuntu server. Now I want my users to use the same password as for their windows login. The guide on the MediaWiki page tells that a LDAP server is needed. ...
1
vote
0answers
65 views

Kerberos TGT in default session gnome-keyring

I am using a 3rd party kerberos kit to authenticate to my work site. In RHEL/CentOS, my ticket is saved into the default session gnome-keyring; yet I am missing something with Ubuntu. When I kinit, ...
0
votes
1answer
309 views

mod_auth_kerb/apache 2.4 not authenticating for sub folders

I share subversion repositories using mod_dav_svn and Kerberos authentication mod_authz_kerb. All of this worked and recently it stopped. It authenticates the user for top level folder of the URL ...
0
votes
0answers
116 views

ssh not authenticating to kerberos

I am using my single PC as a ssh-client,ssh-server,kdc,admin-server. I am not using any of the virtual machines for this kerberos lab. I am connected to wife get the ip of 192.168.1.224 but i am using ...
0
votes
0answers
269 views

Kerberized NFS4 and Active Directory

I'm trying to use NFS4 on Ubuntu 14.04 LTS with Active Directory for user authentication, with Kerberos security, and I'm having trouble. When I mount with sec=sys, all works, but when I try to mount ...
0
votes
0answers
1k views

Setting Up Active Directory With Samba4 & Kerberos

I am new to active directory and configuring domain controllers! I have followed this guide ( ...
1
vote
1answer
65 views

LDAP - benefits and challenges instead of local user management [closed]

I have been looking at LDAP + Kerberos for my setup. I am wondering what is the benefits and challenges with using LDAP + Kerberos instead of local user manangement. I know that LDAP can be used for ...
0
votes
1answer
2k views

Kerberos - Active Directory Domain Failure (Ubuntu)

I try to join Active Directory and Samba 4 in Ubuntu 12.04.05. When I run host -t SRV _kerberos._udp.test.sg I get the error: Host _kerberos._udp.test.sg not found: 3(NXDOMAIN) meanwhile $# host ...
1
vote
0answers
153 views

Hostname / VPN / NFS / Kerberos

At home I'm running Ubuntu Server 14.04.1 with Kerberised NFS Shares. The NFS clients obtain their full FDQN via DHCP. When away from home and trying to access NFS shares via VPN, Kinit fails with: ...
-1
votes
0answers
1k views

Trying to install Squid3 on Trusty with AD Authentication

I'm trying to install Squid3 as a proxy server on 14.04, with AD Authentication such that authenticated users will not have to 'login' to the proxy each time they want to access the internet. I've ...
0
votes
1answer
134 views

Kerberos/NIS users require shadow hack

If I have a Ubuntu system to use Kerberos for authentication and NIS for information, users cannot log in unless I copy the content of my NIS shadow map to /etc/shadow. They get insta-rejected. If I ...
1
vote
0answers
319 views

I have a problem with domain trust between samba and AD

I configured Samba PDC and AD Domain. Here is my Topology. enter link description here And I saw that Samba PDC loading AD users. With "getent passwd" command and "wbinfo -ug" command. Here is my ...
1
vote
0answers
65 views

Kerberized NFSv4 no write permission

I have some trouble with installing NFSv4 with Kerberos. I can't write on my NFSv4-Share. That's my /etc/exports: /srv/export/ gss/krb5p(rw,fsid=0,no_subtree_check,async,no_root_squash) Thats ...
0
votes
3answers
3k views

SSSD password change not working with LDAP backend

Environment info: AD on win 2k8r2 Ubuntu 12.04.5 LTS SSSD v1.8.6 everything is in the same vlan I have an LDAP / SSSD solution in use on our Ubuntu servers. The auth process works correctly ...
2
votes
0answers
2k views

Samba Share not accessible with AD user

I try to install a samba server for active directory authentication and shares. I managed to configure kerberos (kinit klist works) I configured smb.conf. wbinfo -u wbinfo -g getent group *showing ...
1
vote
0answers
561 views

Where is krb5_util on Ubuntu 14.04?

The crucial krb5_util command (http://web.mit.edu/kerberos/krb5-latest/doc/admin/admin_commands/kdb5_util.html#kdb5-util-8) doesn't seem to be available on Ubuntu 14.04 although it ships with 1.12.x ...
5
votes
1answer
3k views

How do I configure a default principal for kinit (acquiring Kerberos ticket)?

When using kinit to acquire a Kerberos ticket I have configured it to use a default realm, e.g. GERT.LAN by editing /etc/krb5.conf: [libdefaults] default_realm = GERT.LAN That's great since ...
1
vote
1answer
81 views

What are the difference between maxlife and maxrenewlife in kerberos?

I want to know if I set maxlife to three day, but my ticket issued only a day. So I want t o know the difference between maxlife and maxrenewlife.
0
votes
1answer
53 views

Share directories with Active Directory users

I need to configure an Ubuntu, to share directories. The allowed users are in an Active Directory in Windows 2003 server. Can I use ntlm for that or only kerberos?
0
votes
1answer
959 views

Kerberos and google-authenticator (2-factor auth)

Does anyone know how can I use google-authenticator in combination with kerberos and thus provide to my users 2-factor authentication?
0
votes
1answer
336 views

How to make sshd create non-existing user when using kerberos?

I am setting my sshd to use kerberos auth. Everything was fine until I actually login via ssh. I got invalid user. If I added the account to the server running sshd, then I could login using password ...
0
votes
1answer
151 views

kerberos ticket watcher

I just switched from openSuSe to Ubuntu 12.04. At work we use kerberos to auth to different systems. In openSuSe I had a nice little tray app "kerberos ticket watcher" that could renew and initialise ...
2
votes
1answer
6k views

Samba share not accessible from Windows 7 (on domain) via hostname

I have spent several days attempting to solve this- none of the answers on this forum or any other were able to help. I tried everything. I read the entire Samba manual. Nothing worked. Happily, I ...
1
vote
1answer
2k views

authentication method for likewise to join a domain

I installed likewise and joined my an active directory domain. I'm finding it's a bit unclear on how the default authentication works. Do I have to do any extra configuration to enable kerberos? If I ...
1
vote
1answer
1k views

Ubuntu : Kerberos With LDAP

I am using ubuntu 12.04. I am installing LDAP with Kerberos authentication. I followed the steps in the ubuntu documentation. https://help.ubuntu.com/12.04/serverguide/kerberos-ldap.html After ...
0
votes
1answer
232 views

Password not accepted at login

I had tried to setup kerberos authentication to log into some ADS thing at my new university, however that didn't work and resulted in me having to enter my password twice for everything. So I did: ...
0
votes
1answer
418 views

krb5-multidev, libk5crypto3, libk5crypto3:i386 package dependency

Using Ubuntu 12.04 Asus U43F I can no longer update, install or remove packages via software center because of package dependency errors. sudo apt-get install -f reads the following: Reading ...
0
votes
0answers
32 views

unmet dependencies+I cannot update anymore [duplicate]

Possible Duplicate: When trying to upgrade Kerberos development libraries, why do I get an “unmet dependencies” error? The following packages have unmet dependencies: ...
1
vote
1answer
423 views

Kerberos with Active Directory

So I've setup kerberos on Ubuntu in various ways (likewise-open, winbind, etc) and keep coming up with the same problem. kinit works fine and I get the initial ticket, but when I try to access a proxy ...
2
votes
1answer
203 views

“AND Operator” in PAM

I need to prevent users from authenticating through Kerberos when the encrypted /home/users has not yet been mounted. (This is to avoid corrupting the ecryptfs mountpoint) Currently I have these ...
10
votes
2answers
13k views

rails & libpq-dev nasty dependencies

I don't know if this question belongs here, but I'll take a shot. Hi. I'm running ubuntu 11.10 dual-boot with windows vista on my machine. On Ubuntu, I've installed RVM, rails gem, & PostgreSQL ...
1
vote
1answer
5k views

Kerberos SSO with Apache - Partly works

Ok... I've got my Apache server running, and I have Kerberos configured to integrate with our primary domain controller (Windows 2003). When I try to access my page, however, I get a login ...
17
votes
1answer
2k views

Setup for mounting kerberized nfs home directory - gssd not finding valid kerberos ticket

Our home directories are exported via kerberized nfs, so the user needs a valid kerberos ticket to be able to mount its home. This setup works fine with our existing clients & server. Now we want ...