Kerberos is a network authentication protocol.

learn more… | top users | synonyms

17
votes
1answer
1k views

Setup for mounting kerberized nfs home directory - gssd not finding valid kerberos ticket

Our home directories are exported via kerberized nfs, so the user needs a valid kerberos ticket to be able to mount its home. This setup works fine with our existing clients & server. Now we want ...
7
votes
2answers
9k views

rails & libpq-dev nasty dependencies

I don't know if this question belongs here, but I'll take a shot. Hi. I'm running ubuntu 11.10 dual-boot with windows vista on my machine. On Ubuntu, I've installed RVM, rails gem, & PostgreSQL ...
4
votes
1answer
183 views

How do I configure a default principal for kinit (acquiring Kerberos ticket)?

When using kinit to acquire a Kerberos ticket I have configured it to use a default realm, e.g. GERT.LAN by editing /etc/krb5.conf: [libdefaults] default_realm = GERT.LAN That's great since ...
2
votes
1answer
3k views

Samba share not accessible from Windows 7 (on domain) via hostname

I have spent several days attempting to solve this- none of the answers on this forum or any other were able to help. I tried everything. I read the entire Samba manual. Nothing worked. Happily, I ...
2
votes
1answer
168 views

“AND Operator” in PAM

I need to prevent users from authenticating through Kerberos when the encrypted /home/users has not yet been mounted. (This is to avoid corrupting the ecryptfs mountpoint) Currently I have these ...
1
vote
1answer
27 views

What are the difference between maxlife and maxrenewlife in kerberos?

I want to know if I set maxlife to three day, but my ticket issued only a day. So I want t o know the difference between maxlife and maxrenewlife.
1
vote
1answer
320 views

authentication method for likewise to join a domain

I installed likewise and joined my an active directory domain. I'm finding it's a bit unclear on how the default authentication works. Do I have to do any extra configuration to enable kerberos? If I ...
1
vote
1answer
328 views

Kerberos with Active Directory

So I've setup kerberos on Ubuntu in various ways (likewise-open, winbind, etc) and keep coming up with the same problem. kinit works fine and I get the initial ticket, but when I try to access a proxy ...
1
vote
0answers
105 views

Samba Share not accessible with AD user

I try to install a samba server for active directory authentication and shares. I managed to configure kerberos (kinit klist works) I configured smb.conf. wbinfo -u wbinfo -g getent group *showing ...
1
vote
0answers
84 views

Where is krb5_util on Ubuntu 14.04?

The crucial krb5_util command (http://web.mit.edu/kerberos/krb5-latest/doc/admin/admin_commands/kdb5_util.html#kdb5-util-8) doesn't seem to be available on Ubuntu 14.04 although it ships with 1.12.x ...
1
vote
1answer
659 views

Ubuntu : Kerberos With LDAP

I am using ubuntu 12.04. I am installing LDAP with Kerberos authentication. I followed the steps in the ubuntu documentation. https://help.ubuntu.com/12.04/serverguide/kerberos-ldap.html After ...
0
votes
0answers
9 views

Problem with Samba4 at restart

I have successfully installed samba and kerberos, I can authenticate windows on ubuntu server but I am unsure I did correctly because i' m not sure if samba authenticate toward kerberos DB. Always ...
0
votes
0answers
25 views

ecryptfs on a nfs4 home

I am have been banging my head against a wall for days now trying to make this work. Now I finally decided to get help. This actually concerns a Debian server but ecryptfs is maintained by Ubuntu ...
0
votes
1answer
61 views

SSSD password change not working with LDAP backend

Environment info: AD on win 2k8r2 Ubuntu 12.04.5 LTS SSSD v1.8.6 everything is in the same vlan I have an LDAP / SSSD solution in use on our Ubuntu servers. The auth process works correctly ...
0
votes
0answers
124 views

Having trouble setting up LDAP and Kerberos

I'm following the 14.4 Server Guide for Kerberos and LDAP. When I get to step 3.5 of Configuring LDAP, it says my password is wrong: ldap_bind: Invalid credentials (49) I guess the password on ...
0
votes
0answers
26 views

NFSv4 with Kerberos

I am trying to configure NFSv4 with Kerberos according here. How I create credentials for server and clients?
0
votes
1answer
32 views

Share directories with Active Directory users

I need to configure an Ubuntu, to share directories. The allowed users are in an Active Directory in Windows 2003 server. Can I use ntlm for that or only kerberos?
0
votes
1answer
245 views

Kerberos and google-authenticator (2-factor auth)

Does anyone know how can I use google-authenticator in combination with kerberos and thus provide to my users 2-factor authentication?
0
votes
0answers
41 views

Kerberos isn't allow existing users login on some machine

In my place, there are more than 40 computers in the office and using Kerberos as authentication. The issue occurs in about 4 computers in the office. I know not much about Kerberos system but I ...
0
votes
0answers
35 views

How to setup xdm to use kerberos without pam?

I know I could do this via PAM. But I see krb5 support in xdm souce. And Xsecurity says so, too. Then my question is, how? I cannot find a step by step document on this.
0
votes
1answer
152 views

How to make sshd create non-existing user when using kerberos?

I am setting my sshd to use kerberos auth. Everything was fine until I actually login via ssh. I got invalid user. If I added the account to the server running sshd, then I could login using password ...
0
votes
0answers
123 views

heimdal error Decrypt integrity check failed for checksum type

when I try to authentication with heimdal-kdc ,I get this error in kdc log : (enctype aes256-cts-hmac-sha1-96) error Decrypt integrity check failed for checksum type hmac-sha1-96-aes256, key type ...
0
votes
1answer
65 views

kerberos ticket watcher

I just switched from openSuSe to Ubuntu 12.04. At work we use kerberos to auth to different systems. In openSuSe I had a nice little tray app "kerberos ticket watcher" that could renew and initialise ...
0
votes
1answer
241 views

krb5-multidev, libk5crypto3, libk5crypto3:i386 package dependency

Using Ubuntu 12.04 Asus U43F I can no longer update, install or remove packages via software center because of package dependency errors. sudo apt-get install -f reads the following: Reading ...
0
votes
0answers
32 views

unmet dependencies+I cannot update anymore [duplicate]

Possible Duplicate: When trying to upgrade Kerberos development libraries, why do I get an “unmet dependencies” error? The following packages have unmet dependencies: ...
0
votes
1answer
187 views

Password not accepted at login

I had tried to setup kerberos authentication to log into some ADS thing at my new university, however that didn't work and resulted in me having to enter my password twice for everything. So I did: ...
0
votes
1answer
4k views

Kerberos SSO with Apache - Partly works

Ok... I've got my Apache server running, and I have Kerberos configured to integrate with our primary domain controller (Windows 2003). When I try to access my page, however, I get a login ...