Kerberos is a network authentication protocol.

learn more… | top users | synonyms

17
votes
1answer
2k views

Setup for mounting kerberized nfs home directory - gssd not finding valid kerberos ticket

Our home directories are exported via kerberized nfs, so the user needs a valid kerberos ticket to be able to mount its home. This setup works fine with our existing clients & server. Now we want ...
10
votes
2answers
13k views

rails & libpq-dev nasty dependencies

I don't know if this question belongs here, but I'll take a shot. Hi. I'm running ubuntu 11.10 dual-boot with windows vista on my machine. On Ubuntu, I've installed RVM, rails gem, & PostgreSQL ...
5
votes
1answer
4k views

How do I configure a default principal for kinit (acquiring Kerberos ticket)?

When using kinit to acquire a Kerberos ticket I have configured it to use a default realm, e.g. GERT.LAN by editing /etc/krb5.conf: [libdefaults] default_realm = GERT.LAN That's great since ...
3
votes
0answers
3k views

Samba Share not accessible with AD user

I try to install a samba server for active directory authentication and shares. I managed to configure kerberos (kinit klist works) I configured smb.conf. wbinfo -u wbinfo -g getent group *showing ...
2
votes
1answer
6k views

Samba share not accessible from Windows 7 (on domain) via hostname

I have spent several days attempting to solve this- none of the answers on this forum or any other were able to help. I tried everything. I read the entire Samba manual. Nothing worked. Happily, I ...
2
votes
1answer
211 views

“AND Operator” in PAM

I need to prevent users from authenticating through Kerberos when the encrypted /home/users has not yet been mounted. (This is to avoid corrupting the ecryptfs mountpoint) Currently I have these ...
1
vote
1answer
74 views

LDAP - benefits and challenges instead of local user management [closed]

I have been looking at LDAP + Kerberos for my setup. I am wondering what is the benefits and challenges with using LDAP + Kerberos instead of local user manangement. I know that LDAP can be used for ...
1
vote
1answer
2k views

authentication method for likewise to join a domain

I installed likewise and joined my an active directory domain. I'm finding it's a bit unclear on how the default authentication works. Do I have to do any extra configuration to enable kerberos? If I ...
1
vote
1answer
93 views

What are the difference between maxlife and maxrenewlife in kerberos?

I want to know if I set maxlife to three day, but my ticket issued only a day. So I want t o know the difference between maxlife and maxrenewlife.
1
vote
1answer
434 views

Kerberos with Active Directory

So I've setup kerberos on Ubuntu in various ways (likewise-open, winbind, etc) and keep coming up with the same problem. kinit works fine and I get the initial ticket, but when I try to access a proxy ...
1
vote
0answers
34 views

Connect with an AD user to a ubuntu Machine

I try to log on under a ubuntu machine with an AD user via the GUI lightdm , but access is denied with "invalid password , please try again " My machine has been added in the AD : net ads join -U ...
1
vote
0answers
75 views

winbind and passwd issues

I successfully configured a Ubuntu 15.10 Workstation to authenticate against Active Directory. The only thing left so far is the ability to change the Active Directory password. When I enter the ...
1
vote
0answers
91 views

Kerberos TGT in default session gnome-keyring

I am using a 3rd party kerberos kit to authenticate to my work site. In RHEL/CentOS, my ticket is saved into the default session gnome-keyring; yet I am missing something with Ubuntu. When I kinit, ...
1
vote
0answers
212 views

Hostname / VPN / NFS / Kerberos

At home I'm running Ubuntu Server 14.04.1 with Kerberised NFS Shares. The NFS clients obtain their full FDQN via DHCP. When away from home and trying to access NFS shares via VPN, Kinit fails with: ...
1
vote
0answers
425 views

I have a problem with domain trust between samba and AD

I configured Samba PDC and AD Domain. Here is my Topology. enter link description here And I saw that Samba PDC loading AD users. With "getent passwd" command and "wbinfo -ug" command. Here is my ...
1
vote
0answers
79 views

Kerberized NFSv4 no write permission

I have some trouble with installing NFSv4 with Kerberos. I can't write on my NFSv4-Share. That's my /etc/exports: /srv/export/ gss/krb5p(rw,fsid=0,no_subtree_check,async,no_root_squash) Thats ...
1
vote
0answers
667 views

Where is krb5_util on Ubuntu 14.04?

The crucial krb5_util command (http://web.mit.edu/kerberos/krb5-latest/doc/admin/admin_commands/kdb5_util.html#kdb5-util-8) doesn't seem to be available on Ubuntu 14.04 although it ships with 1.12.x ...
1
vote
1answer
1k views

Ubuntu : Kerberos With LDAP

I am using ubuntu 12.04. I am installing LDAP with Kerberos authentication. I followed the steps in the ubuntu documentation. https://help.ubuntu.com/12.04/serverguide/kerberos-ldap.html After ...
1
vote
1answer
5k views

Kerberos SSO with Apache - Partly works

Ok... I've got my Apache server running, and I have Kerberos configured to integrate with our primary domain controller (Windows 2003). When I try to access my page, however, I get a login ...
0
votes
1answer
54 views

What is AFS Kerberos used for? Can I safely remove it?

I'm trying to eliminate unused services that listen on open ports. My hope is to better secure my system. After running nmap I found only one service listening on port 7004 that I wasn't already ...
0
votes
2answers
413 views

mod_auth_kerb/apache 2.4 not authenticating for sub folders

I share subversion repositories using mod_dav_svn and Kerberos authentication mod_authz_kerb. All of this worked and recently it stopped. It authenticates the user for top level folder of the URL ...
0
votes
1answer
4k views

Kerberos - Active Directory Domain Failure (Ubuntu)

I try to join Active Directory and Samba 4 in Ubuntu 12.04.05. When I run host -t SRV _kerberos._udp.test.sg I get the error: Host _kerberos._udp.test.sg not found: 3(NXDOMAIN) meanwhile $# host ...
0
votes
0answers
4 views

How to revoke a kerberos token for OpenAFS on client side?

I authenticate to my OpenAFS with kinit [username] && aklog so that a authentication token is displayed in tokens. How can I revoke this authentication in order to perform tests? sudo ...
0
votes
0answers
98 views

Samba will not connect to domain via active directory

I am so close to being able to connect to my windows active directory. I want to use the ubuntu server as a simple file server for domain users When I do a kinit I can get a ticket but when I try to ...
0
votes
1answer
40 views

/etc/hosts configuration error , ping not working

I am newbie to ubuntu plus kerberos , trying to configure kerberos in my vm ubuntu by i am not able to pass the step 2 in configuring hosts .below are the files. i am in the process of learning so ...
0
votes
0answers
39 views

Samba error when connecting to Active Directory

hoping someone can give me some insight into an error I'm getting. I'm trying to connect a Ubuntu workstation to Active Directory using Kerberos, Samba, and Winbind. When I run the kinit command, it ...
0
votes
0answers
218 views

kerberos passwd: Authentication token manipulation error

(note - ignore the upgrade 15.10 bit, see "more info", below) I've just upgraded to Ubuntu 15.10 using the Live CD over an existing 14.04 version. Users that were configured before were lost from ...
0
votes
0answers
30 views

gubuntu 14 screensaver kerberos

It seems gubuntu 14.04.3 default screensaver don't renew the kerberos afs token. I've created the file /etc/pam.d/gnome-screensaver with: @include common-auth auth optional ...
0
votes
0answers
449 views

npm kerberos install issues

thanks for your time, this is the case, i have some problems when try to install kerberos nodejs package on my ubuntu 14.04 x64. This is the terminal output: khan@khan-Satellite-L645D:~$ npm install ...
0
votes
0answers
182 views

Replicate Microsoft Active Directory to Ubuntu Server

I finally installed MediaWiki on my Ubuntu server. Now I want my users to use the same password as for their windows login. The guide on the MediaWiki page tells that a LDAP server is needed. ...
0
votes
0answers
155 views

ssh not authenticating to kerberos

I am using my single PC as a ssh-client,ssh-server,kdc,admin-server. I am not using any of the virtual machines for this kerberos lab. I am connected to wife get the ip of 192.168.1.224 but i am using ...
0
votes
1answer
170 views

Kerberos/NIS users require shadow hack

If I have a Ubuntu system to use Kerberos for authentication and NIS for information, users cannot log in unless I copy the content of my NIS shadow map to /etc/shadow. They get insta-rejected. If I ...
0
votes
4answers
4k views

SSSD password change not working with LDAP backend

Environment info: AD on win 2k8r2 Ubuntu 12.04.5 LTS SSSD v1.8.6 everything is in the same vlan I have an LDAP / SSSD solution in use on our Ubuntu servers. The auth process works correctly ...
0
votes
1answer
54 views

Share directories with Active Directory users

I need to configure an Ubuntu, to share directories. The allowed users are in an Active Directory in Windows 2003 server. Can I use ntlm for that or only kerberos?
0
votes
1answer
1k views

Kerberos and google-authenticator (2-factor auth)

Does anyone know how can I use google-authenticator in combination with kerberos and thus provide to my users 2-factor authentication?
0
votes
1answer
362 views

How to make sshd create non-existing user when using kerberos?

I am setting my sshd to use kerberos auth. Everything was fine until I actually login via ssh. I got invalid user. If I added the account to the server running sshd, then I could login using password ...
0
votes
1answer
177 views

kerberos ticket watcher

I just switched from openSuSe to Ubuntu 12.04. At work we use kerberos to auth to different systems. In openSuSe I had a nice little tray app "kerberos ticket watcher" that could renew and initialise ...
0
votes
1answer
454 views

krb5-multidev, libk5crypto3, libk5crypto3:i386 package dependency

Using Ubuntu 12.04 Asus U43F I can no longer update, install or remove packages via software center because of package dependency errors. sudo apt-get install -f reads the following: Reading ...
0
votes
0answers
33 views

unmet dependencies+I cannot update anymore [duplicate]

Possible Duplicate: When trying to upgrade Kerberos development libraries, why do I get an “unmet dependencies” error? The following packages have unmet dependencies: ...
0
votes
1answer
241 views

Password not accepted at login

I had tried to setup kerberos authentication to log into some ADS thing at my new university, however that didn't work and resulted in me having to enter my password twice for everything. So I did: ...