Questions tagged [kerberos]
Kerberos is a network authentication protocol.
1
vote
1answer
34 views
Edit Sudoers file to allow sudo rights to a AD domain group
I recently managed to get my Ubuntu Server 18.04 machine connected to my companies Windows AD. I am able to login with my AD credentials however I want to take it a step further...
This is the ...
0
votes
1answer
28 views
Wrong start and expire date in credentials cache after kerberos auth
I log in to Ubuntu 18.04 successfully with kerberos/sssd authentification in an ActiveDirectory domain.
Since a few days I have an issue using my kerberos ticket/credentials cache to auth with some ...
1
vote
0answers
133 views
Unable to mount CIFS share using AutoFS and Kerberos
I can mount a CIFS share using mount directly from my terminal:
sudo mount -t cifs -o multiuser,cruid=1395409773,vers=3.0,sec=krb5 //fileserver2.mba.ac.uk/Z\ Drive /mnt
shows the following in /var/...
1
vote
2answers
81 views
Kerberos and Ubuntu 18
I am trying to configure a automated join to domain on my Ubuntu workstations. I have everything in place (I at least I believe so as the following command works fine)
net ads join -U <username>...
0
votes
0answers
26 views
How to “kdestroy” user's ticket in FreeIPA (LDAP 389 Directory Server)
We are trying out FreeIPA (LDAP 389 Directory Server) and integrated the same to our Ambari Hadoop cluster (HDP v3.0.1).
We are able to add users and provide them access to Hadoop with help of Kinit ...
0
votes
1answer
259 views
Package krb5-kdc is not available [duplicate]
Ubuntu Server 18.04
Tried:
~$ sudo apt-get update
Hit:1 http://archive.ubuntu.com/ubuntu bionic InRelease
Get:2 http://archive.ubuntu.com/ubuntu bionic-security InRelease [83.2 kB]
Get:3 http://...
0
votes
0answers
45 views
Kerberized NFS share errors with Stale file handle errors
I'm on Ubuntu 16.04.5. I followed this example, which was mostly taken from these instructions that RedHate provides. I can successfully mount and access the NFS shared as root on the NFS-Client, ...
1
vote
0answers
322 views
Integrate Ubuntu 18.04 box with one AD domain and user with other AD domain
I will try to explain my problem as simple as I can. I have the following problem:
Our organization has two Active Directory forests, in one hand computer.forest.com has the computer objects, in the ...
1
vote
0answers
202 views
18.04: NFS4 over Kerberos fails
On a 18.04-client NFS4 over Kerberos is fine against an old ubuntu 10.04 nfs4-server. It would not work however against a Netapp FAS3140 (which is accessible from 14.04 clients).
client_18.04_# mount ...
0
votes
0answers
52 views
DNS issues after installing Samba4 Active Directory
I installed Samba Active Directory Domain Controller on Ubuntu Server 18.04 running on VirtualBox. I used the procedure from this link
When I got to Step 16 and queried the AD Controller, the ...
1
vote
0answers
2k views
realmd domain join with kinit in Ubuntu 18.04
I’m trying to set up an Ubuntu 18.04 machine and joining it to an Active Directory domain. Previously (e. g. on Ubuntu 17.10) I could do
# kinit -kt /path/to/keytab my_username
# realm join ad....
0
votes
0answers
776 views
Domain Controller on Ubuntu server old tutorial
For testing I try to get a domain controller (samba4) up and running on an Ubuntu server 18.04. I have found a tutorial for it on YouTube but it is for a older version.
https://www.youtube.com/watch?...
1
vote
0answers
80 views
Printing to smb with kerberos auth?
I want to set up a printer via samba client to a Windows printserver.
I managed to do it specifying this connection string:
smb://user:pass@printserver/printer
Is there a way to do auth through ...
0
votes
0answers
38 views
creating realm using ldap backend fails with kdb5_ldap_util reporting out of memory error
I'm trying to set up a kerberos/ldap system following the instructions at https://help.ubuntu.com/lts/serverguide/kerberos-ldap.html.en. I've cruised along until the point where I try to create the ...
0
votes
0answers
492 views
Moving /home directory to NFS safely and preserving all permissions
I am trying to link my home directory on a cloud machine (OpenNebula) to a directory on the NFS, because my cloud machine has a very limited capacity of only 5 GB.
I have been using the same approach ...
0
votes
0answers
118 views
Kerberos SSH Login
I'm trying to setup a
ssh server
ssh client
kerberos server
Now, on both the SSH server and client I can poll a ticket by calling, kinit -p root/admin.
In SSH/SSHD config I set
...
0
votes
0answers
99 views
No Kerberos Auth wizard after installing krb5-user
I'm using Ubuntu 16.04 and am attempting to setup Kerberos authentication. Throughout the net every guide I came across shows this Wizard showing up right after installing this package. However, in my ...
1
vote
1answer
1k views
SSH with Kerberos authentication
I am encountering the following problem: I am trying to connect from a client VM to a server VM using SSH with Kerberos authentication, but SSH still asking me for password. Obviously, I modified the /...
0
votes
1answer
25 views
How can I configure local (USB) printers when a remote cups server is specified (in client.conf)?
In our organisation we have a central CUPS server (with Kerberos) for printing. On all Ubuntu clients this server is configured via the client.conf.
How can I add additional local printers (USB) to ...
0
votes
0answers
60 views
kerberos connection not working after freeipa installation
I tried installing freeipa on ubuntu v16 (cloud server) using the following:
modified /etc/host to use the private IP address of the virtual machine and the corresponding host (the A name has ...
4
votes
1answer
1k views
CIFS mounts and Kerberos - permissions on access or best practice
Currently our Ubuntu-Clients connect to cifs shares during system boot via /etc/fstab. This has the following disadvantages:
Passwords are written in plain text as mount option
The password should ...
0
votes
1answer
95 views
How to specify home directory with 'adduser' when user creation fails on a machine with NFS home directory and Kerberos authentication
I am using adduser --disabled-password to create a user that uses Kerberos authentication for letting them sign into their account. Therefore, the password is predefined by a central Kerberos database....
0
votes
1answer
2k views
Kerberos authentication: clock skew too great
When trying
kinit viesturs@SERVER.COM
I get
viesturs@SERVER.COM's Password:
kinit: krb5_get_init_creds: Clock skew too great
What to do?
Here is my timedatectl status
$ timedatectl status
...
0
votes
0answers
4k views
kerberos_kinit_password failed preauthentication failed
i'm using my ubuntu server to join in my windows domain, so i have my samba managed by my windows groups. Everything is working fine but every 3-5 days, i'm getting this error:
...
1
vote
0answers
157 views
Why can't I keep multiple Kerberos tickets
I currently want to ssh into two different realms. However, whenever I generate a ticket for 1 realm using pkinit, I lose the ticket I've generated for the other realm.
Why is this & how can I ...
0
votes
0answers
424 views
apt-get krb5-user unmet dependencies 1.14.3+dfsg-2ubuntu1?
I need to install krb5-user but I encounter the error below:
krb5-user : Depends: libkrb5-3 (= 1.14.3+dfsg-2) but
1.14.3+dfsg-2ubuntu1 is to be installed
I don't understand what does this mean ...
0
votes
1answer
2k views
mount cifs share on terminal fails (using password or kerberos krb5 ticket)
HOST: Kubuntu 16.04.3 LTS
LOCALHOST: Kubuntu 17.10
I'm not able anymore to mount a cifs share on a terminal:
mount -t cifs -o user=USER,domain=DOMAIN //HOST/share /mnt/tmp
Password for USER@//HOST/...
1
vote
1answer
687 views
Permission denied on mounted nfs folders
I'm trying to mount home directories over nfs on a few clients. Mounting works but I cannot cd /srv/nfs4: Permission denied. root can enter those mounted directories and read files there. Checking as ...
1
vote
0answers
76 views
Cannot change password for local account [duplicate]
I have a non-root, local account where I have been unable to use 'passwd' as user root to change that password. The system is an AWS instance running Ubuntu 14.04 bound to Active Directory using both ...
0
votes
1answer
478 views
How can I mount a Windows folder and enforce its NTFS permissions?
I have an existing Ubuntu server. Users already sign into it with AD credentials. The problem is that there is a mounted file share - in a Windows environment, the users only have access to folders ...
0
votes
0answers
866 views
Ubuntu 17.10 - Kerberos/SSSD AD User login only sometimes works
I am new here, so please advise me, if I did miss something about the rules here.
We are running a network of computers in a Windows Server 2016 AD domain.
In Ubuntu 16.04 we configured Ubuntu to ...
1
vote
0answers
330 views
AutoFS with Kerberos passing root UID instead of user UID at login, fails to mount
On a Ubuntu 16.04 test VM, I can automount my homedir (as CIFS in this example, NFSv4 behaves similarly), but only after I have already logged in. Apparently, autofs is passing UID=0 instead of my ...
0
votes
1answer
799 views
Trying to access kerberized NFS mount gives: 'ERROR: GSS-API: error in gss_acquire_cred()'
I have a kerberized NFS filesystem we're trying to access from an Ubuntu 16.04 client. The server is RHEL7. We can mount it successfully (as root):
mount -t nfs4 -o sec=krb5 colossal.ipa....
0
votes
1answer
560 views
pam / ad issue with lightdm
im having issues logging in the desktop via AD with my current setup with sssd, kerberos, samba, and AD. heres the output of the auth.log file. it seems that pam and lightdm aren't working well with ...
0
votes
0answers
1k views
Kadmin: Client not found
I'm attempting to join ubuntu 16.04 LTS to a windows AD. My goal is for this client machine to be able to log in with the Windows AD username and be able to access the Windows shares.
I started by ...
1
vote
0answers
1k views
SSSD ad authentication windows server 2012 R2
I want to login with AD users on a client with no gui. It is a Ubuntu 16.04 machine with SSSD. Active Directory server is Windows Server 2012 R2. I cannot login on console login with "aduser@srv.local"...
0
votes
1answer
1k views
Insufficient quota exists to complete the operation, net ads join
I'm trying to join Active Directory in Xubuntu 16.04 in a enterprise business enviroment so I'll change the name of my REALM by MY.EXAMPLE.CORP. My issue is: when I run
net ads join -U Administrator
...
2
votes
0answers
513 views
Forwarded kerberos tickets cached in /tmp instead of keyring
I'm using Ubuntu 14.04 and 16.04. They're configured to cache kerb tickets in the kernel keyring via this setting in the [libdefaults] section of /etc/krb5.conf:
default_ccache_name = KEYRING:...
2
votes
1answer
6k views
rdesktop, credSSP and kerberos
I have installed the program rdesktop with the command
sudo apt-get install rdesktop
I use rdesktop with the command
rdesktop -a 32 192.168.0.38
with the error message
Disconnected due to ...
2
votes
1answer
361 views
1
vote
1answer
940 views
GSSAPI ssh login on Ubuntu 14.04 with SSSD and Active Directory
I'm trying to move from 12.04LTS with likewise-open to 14.04LTS with sssd using realmd and I've got it working for the most part, but I can't get Kerberos SSO to work. Under likewise I was able to do ...
2
votes
0answers
311 views
Multiple DC's in the krb5.conf realms
I have the following configuration in my /etc/krb5.conf (note this is only part of the config):
[libdefaults]
ticket_lifetime = 24h
default_realm = HQ.LOCAL
forwardable = true
[realms]
...
1
vote
0answers
3k views
Problem with AD user authentication after joining Windows Domain
I've been trying to add my linux machine into the AD of my office in order to work without problems. I started following this guide: SSSD and Active Directory in my ubuntu 16.04 (fresh install) and ...
0
votes
1answer
604 views
/etc/hosts configuration error , ping not working
I am newbie to ubuntu plus kerberos , trying to configure kerberos in my vm ubuntu by i am not able to pass the step 2 in configuring hosts .below are the files. i am in the process of learning so ...
0
votes
1answer
2k views
What is AFS Kerberos used for? Can I safely remove it?
I'm trying to eliminate unused services that listen on open ports. My hope is to better secure my system.
After running nmap I found only one service listening on port 7004 that I wasn't already ...
1
vote
1answer
136 views
Connect with an AD user to a ubuntu Machine
I try to log on under a ubuntu machine with an AD user via the GUI lightdm , but access is denied with "invalid password , please try again "
My machine has been added in the AD : net ads join -U ...
1
vote
0answers
422 views
winbind and passwd issues
I successfully configured a Ubuntu 15.10 Workstation to authenticate against Active Directory. The only thing left so far is the ability to change the Active Directory password. When I enter the ...
1
vote
0answers
363 views
Kerberos TGT in default session gnome-keyring
I am using a 3rd party kerberos kit to authenticate to my work site. In RHEL/CentOS, my ticket is saved into the default session gnome-keyring; yet I am missing something with Ubuntu. When I kinit, ...
0
votes
2answers
2k views
mod_auth_kerb/apache 2.4 not authenticating for sub folders
I share subversion repositories using mod_dav_svn and Kerberos authentication mod_authz_kerb. All of this worked and recently it stopped. It authenticates the user for top level folder of the URL ...
1
vote
1answer
177 views
LDAP - benefits and challenges instead of local user management [closed]
I have been looking at LDAP + Kerberos for my setup.
I am wondering what is the benefits and challenges with using LDAP + Kerberos instead of local user manangement. I know that LDAP can be used for ...
