Kerberos is a network authentication protocol.

learn more… | top users | synonyms

17
votes
1answer
1k views

Setup for mounting kerberized nfs home directory - gssd not finding valid kerberos ticket

Our home directories are exported via kerberized nfs, so the user needs a valid kerberos ticket to be able to mount its home. This setup works fine with our existing clients & server. Now we want ...
9
votes
2answers
10k views

rails & libpq-dev nasty dependencies

I don't know if this question belongs here, but I'll take a shot. Hi. I'm running ubuntu 11.10 dual-boot with windows vista on my machine. On Ubuntu, I've installed RVM, rails gem, & PostgreSQL ...
4
votes
1answer
453 views

How do I configure a default principal for kinit (acquiring Kerberos ticket)?

When using kinit to acquire a Kerberos ticket I have configured it to use a default realm, e.g. GERT.LAN by editing /etc/krb5.conf: [libdefaults] default_realm = GERT.LAN That's great since ...
2
votes
1answer
4k views

Samba share not accessible from Windows 7 (on domain) via hostname

I have spent several days attempting to solve this- none of the answers on this forum or any other were able to help. I tried everything. I read the entire Samba manual. Nothing worked. Happily, I ...
2
votes
1answer
170 views

“AND Operator” in PAM

I need to prevent users from authenticating through Kerberos when the encrypted /home/users has not yet been mounted. (This is to avoid corrupting the ecryptfs mountpoint) Currently I have these ...
1
vote
1answer
30 views

What are the difference between maxlife and maxrenewlife in kerberos?

I want to know if I set maxlife to three day, but my ticket issued only a day. So I want t o know the difference between maxlife and maxrenewlife.
1
vote
1answer
391 views

authentication method for likewise to join a domain

I installed likewise and joined my an active directory domain. I'm finding it's a bit unclear on how the default authentication works. Do I have to do any extra configuration to enable kerberos? If I ...
1
vote
1answer
348 views

Kerberos with Active Directory

So I've setup kerberos on Ubuntu in various ways (likewise-open, winbind, etc) and keep coming up with the same problem. kinit works fine and I get the initial ticket, but when I try to access a proxy ...
1
vote
0answers
46 views

I have a problem with domain trust between samba and AD

I configured Samba PDC and AD Domain. Here is my Topology. enter link description here And I saw that Samba PDC loading AD users. With "getent passwd" command and "wbinfo -ug" command. Here is my ...
1
vote
0answers
448 views

Samba Share not accessible with AD user

I try to install a samba server for active directory authentication and shares. I managed to configure kerberos (kinit klist works) I configured smb.conf. wbinfo -u wbinfo -g getent group *showing ...
1
vote
0answers
151 views

Where is krb5_util on Ubuntu 14.04?

The crucial krb5_util command (http://web.mit.edu/kerberos/krb5-latest/doc/admin/admin_commands/kdb5_util.html#kdb5-util-8) doesn't seem to be available on Ubuntu 14.04 although it ships with 1.12.x ...
1
vote
1answer
710 views

Ubuntu : Kerberos With LDAP

I am using ubuntu 12.04. I am installing LDAP with Kerberos authentication. I followed the steps in the ubuntu documentation. https://help.ubuntu.com/12.04/serverguide/kerberos-ldap.html After ...
0
votes
0answers
24 views

After installing krb5 and removing krb5 login not possible

Today i needed to install the krb5 packages which went successfully. After a few hours i dont needed them anymore and removed them completely to keep the system as clean as possible. Installation ...
0
votes
0answers
44 views

Edubuntu 14.04: Cannot log in with realmd or issue tickets with Kerberos

I used the following instructions to join an Edubuntu laptop to an active directory domain: http://funwithlinux.net/2014/04/join-ubuntu-14-04-to-active-directory-domain-using-realmd/ The process ...
0
votes
0answers
16 views

Kerberized NFSv4 no write permission

I have some trouble with installing NFSv4 with Kerberos. I can't write on my NFSv4-Share. Thats my /etc/exports : /srv/export/ gss/krb5p(rw,fsid=0,no_subtree_check,async,no_root_squash) Thats ...
0
votes
0answers
38 views

Problem with Samba4 at restart

I have successfully installed samba and kerberos, I can authenticate windows on ubuntu server but I am unsure I did correctly because i' m not sure if samba authenticate toward kerberos DB. Always ...
0
votes
0answers
80 views

ecryptfs on a nfs4 home

I am have been banging my head against a wall for days now trying to make this work. Now I finally decided to get help. This actually concerns a Debian server but ecryptfs is maintained by Ubuntu ...
0
votes
1answer
330 views

SSSD password change not working with LDAP backend

Environment info: AD on win 2k8r2 Ubuntu 12.04.5 LTS SSSD v1.8.6 everything is in the same vlan I have an LDAP / SSSD solution in use on our Ubuntu servers. The auth process works correctly ...
0
votes
0answers
184 views

Having trouble setting up LDAP and Kerberos

I'm following the 14.4 Server Guide for Kerberos and LDAP. When I get to step 3.5 of Configuring LDAP, it says my password is wrong: ldap_bind: Invalid credentials (49) I guess the password on ...
0
votes
0answers
33 views

NFSv4 with Kerberos

I am trying to configure NFSv4 with Kerberos according here. How I create credentials for server and clients?
0
votes
1answer
39 views

Share directories with Active Directory users

I need to configure an Ubuntu, to share directories. The allowed users are in an Active Directory in Windows 2003 server. Can I use ntlm for that or only kerberos?
0
votes
1answer
329 views

Kerberos and google-authenticator (2-factor auth)

Does anyone know how can I use google-authenticator in combination with kerberos and thus provide to my users 2-factor authentication?
0
votes
1answer
183 views

How to make sshd create non-existing user when using kerberos?

I am setting my sshd to use kerberos auth. Everything was fine until I actually login via ssh. I got invalid user. If I added the account to the server running sshd, then I could login using password ...
0
votes
1answer
77 views

kerberos ticket watcher

I just switched from openSuSe to Ubuntu 12.04. At work we use kerberos to auth to different systems. In openSuSe I had a nice little tray app "kerberos ticket watcher" that could renew and initialise ...
0
votes
1answer
271 views

krb5-multidev, libk5crypto3, libk5crypto3:i386 package dependency

Using Ubuntu 12.04 Asus U43F I can no longer update, install or remove packages via software center because of package dependency errors. sudo apt-get install -f reads the following: Reading ...
0
votes
0answers
32 views

unmet dependencies+I cannot update anymore [duplicate]

Possible Duplicate: When trying to upgrade Kerberos development libraries, why do I get an “unmet dependencies” error? The following packages have unmet dependencies: ...
0
votes
1answer
198 views

Password not accepted at login

I had tried to setup kerberos authentication to log into some ADS thing at my new university, however that didn't work and resulted in me having to enter my password twice for everything. So I did: ...
0
votes
1answer
4k views

Kerberos SSO with Apache - Partly works

Ok... I've got my Apache server running, and I have Kerberos configured to integrate with our primary domain controller (Windows 2003). When I try to access my page, however, I get a login ...