Questions tagged [kerberos]
Kerberos is a network authentication protocol.
83
questions
1
vote
0
answers
23
views
22.04 Samba with AD user - cannot access from Windows
Fresh 22.04 install. Only other configuration is NFS (which is working). Directories are 777. Configuration files:
sssd.conf
[sssd]
domains = home.net
config_file_version = 2
services = nss, pam
[...
- 11
0
votes
0
answers
60
views
22.04: settting up user accounts via Active Directory
After installing 22.04 (desktop) with a local user account, what are the specific steps to set up user accounts via Active Directory?
- 195
0
votes
0
answers
114
views
impish kerberized nfs: an incorrect mount option was specified
I have a working kerberized NFS server. It works fine with MacOS, Debian (Sid), and Raspbian. It doesn't work with Impish Indri, and I can't figure out why.
GSSAPI Logins with SSH work fine with ...
- 11
0
votes
0
answers
146
views
(21.10) client gssd can't seem to see user credentials cache when mounting nfsv4 + kerberos
I'm trying to do an NFSv4 user mount of a laptop (spigot, 21.10) to a server (deuce, 20.04 LTS) with Kerberos and for some reason rpc.gssd can't see my credentials cache. Note that this is 100% a ...
- 1
0
votes
0
answers
103
views
Xubuntu 20.04 AD user cannot connect to TrueNAS CIFS share via PAM Mount - Error code 13
I want to use PAM to mount shares for domain users on my Xubuntu workstations because it doesn't store passwords, but I've been unsuccessful so far. Any help would be greatly appreciated.
My test ...
0
votes
0
answers
304
views
How to set up pam_mount?
I am trying to automount SMB shares from a Synology NAS on a client running Ubuntu Studio 18.04 (yes I know it is out of date and plan to upgrade to 20.04.2 soon). I have tried using autofs, but have ...
- 186
1
vote
1
answer
172
views
Domain AD users aren't get discovered after adding Ubuntu under AD domain control
I've Joined a my ad domain with my Ubuntu 20.04.2 LTS VM (I followed this doc) and I'veJoined the AD domain with Ubuntu as
sudo realm join -U Administrator win2016.local
realm list show below output
...
- 111
0
votes
0
answers
487
views
KRB5 preauthentication failed
I try to authenticate on a Ubuntu 20.04 server joined to a Windows 2012 R2 AD domain, but it fails with "Preauthentication failed" errors. I have configured the Ubuntu server the same way I ...
- 1
1
vote
1
answer
121
views
Ssh conection issue
I'm trying to establish a connection with Fermilab servers. For this I use both Kerberos protocol and ssh to connect my computer; however I only receive kerberos ticket and this message from terminal ...
0
votes
1
answer
1k
views
How can AD users on Ubuntu client seamlessly access files and folders on Synology DC?
I have joined a PC running Ubuntu Studio 18.04 to an AD domain managed by Synology Directory Server. I can now log into the Ubuntu PC with the credentials of a domain user, but there are still two ...
- 186
0
votes
0
answers
38
views
How to create an offline script with zip file to be run instead of running an apt-get install command? [duplicate]
I'm helping someone to install a Kerberos Linux Client on a Ubuntu 18.04 LTS server which is currently offline from the internet. This will be later used to setup authentication to connect to a Kakfa ...
- 139
0
votes
1
answer
34
views
OLD krb5-appl packages
All.
Question:
Do you know where to find package (or substitute package) on ubuntu 18? below:
krb5-clients : Precise (12.04) : Ubuntu
krb5-ftpd : Precise (12.04) : Ubuntu
krb5-rsh-server : Precise (...
- 133
2
votes
0
answers
1k
views
Problem configuring MSSQL client and Kerberos authentication
I have a problem configuring an Ubuntu 18.04. client to connect to MSSQL Server using Windows Authentication.
First of all, Kerberos/AD Login works fine using PAM and Winbind, connection using SQL ...
- 21
1
vote
1
answer
3k
views
CIFS share on fstab via krb5
I have followed; https://warlord0blog.wordpress.com/2018/03/27/access-dfs-shares-from-linux/
Through this I can mount the cifs share manually, however when I try to mount it in the fstab via kerberos;
...
- 277
2
votes
1
answer
2k
views
nfs with kerberos: permissions
I followed the following tutorial to configure nfsv4 with kerberos https://help.ubuntu.com/community/NFSv4Howto
(with the difference that the NFS server is managed by zfsonlinux).
Kerberos is here ...
- 21
0
votes
1
answer
1k
views
Unable to login with Xorg using Active Directory
Recently i've installed an Ubuntu 18.04 VM on Hyper-V with enhanced session enabled.
Successfully joined it to Kerberos Realm in our corporate Active Directory.
While i am using "su - username" i am ...
- 363
0
votes
0
answers
164
views
kerberized ssh client configuration on Ubuntu 16.04
Env:- 16.04.4 LTS (Xenial Xerus)
4.13.0-36-generic
I'm following this article (https://wiki.ubuntu.com/Enterprise/Authentication/KerberosServices ) for setting up kerberised ssh. Tried with ...
- 441
4
votes
4
answers
18k
views
Edit Sudoers file to allow sudo rights to a AD domain group
I recently managed to get my Ubuntu Server 18.04 machine connected to my companies Windows AD. I am able to login with my AD credentials however I want to take it a step further...
This is the ...
- 75
2
votes
2
answers
1k
views
Wrong start and expire date in credentials cache after kerberos auth
I log in to Ubuntu 18.04 successfully with kerberos/sssd authentification in an ActiveDirectory domain.
Since a few days I have an issue using my kerberos ticket/credentials cache to auth with some ...
2
votes
1
answer
3k
views
Unable to mount CIFS share using AutoFS and Kerberos
I can mount a CIFS share using mount directly from my terminal:
sudo mount -t cifs -o multiuser,cruid=1395409773,vers=3.0,sec=krb5 //fileserver2.mba.ac.uk/Z\ Drive /mnt
shows the following in /var/...
- 901
1
vote
2
answers
314
views
Kerberos and Ubuntu 18
I am trying to configure a automated join to domain on my Ubuntu workstations. I have everything in place (I at least I believe so as the following command works fine)
net ads join -U <username>...
- 299
0
votes
1
answer
2k
views
Package krb5-kdc is not available [duplicate]
Ubuntu Server 18.04
Tried:
~$ sudo apt-get update
Hit:1 http://archive.ubuntu.com/ubuntu bionic InRelease
Get:2 http://archive.ubuntu.com/ubuntu bionic-security InRelease [83.2 kB]
Get:3 http://...
- 53
1
vote
0
answers
473
views
Integrate Ubuntu 18.04 box with one AD domain and user with other AD domain
I will try to explain my problem as simple as I can. I have the following problem:
Our organization has two Active Directory forests, in one hand computer.forest.com has the computer objects, in the ...
- 11
1
vote
0
answers
575
views
18.04: NFS4 over Kerberos fails
On a 18.04-client NFS4 over Kerberos is fine against an old ubuntu 10.04 nfs4-server. It would not work however against a Netapp FAS3140 (which is accessible from 14.04 clients).
client_18.04_# mount ...
- 41
1
vote
0
answers
4k
views
realmd domain join with kinit in Ubuntu 18.04
I’m trying to set up an Ubuntu 18.04 machine and joining it to an Active Directory domain. Previously (e. g. on Ubuntu 17.10) I could do
# kinit -kt /path/to/keytab my_username
# realm join ad....
- 717
2
votes
0
answers
283
views
Printing to smb with kerberos auth?
I want to set up a printer via samba client to a Windows printserver.
I managed to do it specifying this connection string:
smb://user:pass@printserver/printer
Is there a way to do auth through ...
- 123
0
votes
0
answers
473
views
Kerberos SSH Login
I'm trying to setup a
ssh server
ssh client
kerberos server
Now, on both the SSH server and client I can poll a ticket by calling, kinit -p root/admin.
In SSH/SSHD config I set
...
- 101
3
votes
1
answer
8k
views
SSH with Kerberos authentication
I am encountering the following problem: I am trying to connect from a client VM to a server VM using SSH with Kerberos authentication, but SSH still asking me for password. Obviously, I modified the /...
- 377
0
votes
1
answer
679
views
How can I configure local (USB) printers when a remote cups server is specified (in client.conf)?
In our organisation we have a central CUPS server (with Kerberos) for printing. On all Ubuntu clients this server is configured via the client.conf.
How can I add additional local printers (USB) to ...
- 326
10
votes
1
answer
13k
views
CIFS mounts and Kerberos - permissions on access or best practice
Currently our Ubuntu-Clients connect to cifs shares during system boot via /etc/fstab. This has the following disadvantages:
Passwords are written in plain text as mount option
The password should ...
- 165
0
votes
1
answer
620
views
How to specify home directory with 'adduser' when user creation fails on a machine with NFS home directory and Kerberos authentication
I am using adduser --disabled-password to create a user that uses Kerberos authentication for letting them sign into their account. Therefore, the password is predefined by a central Kerberos database....
- 9
2
votes
1
answer
24k
views
Kerberos authentication: clock skew too great
When trying
kinit viesturs@SERVER.COM
I get
viesturs@SERVER.COM's Password:
kinit: krb5_get_init_creds: Clock skew too great
What to do?
Here is my timedatectl status
$ timedatectl status
...
- 567
1
vote
0
answers
15k
views
kerberos_kinit_password failed preauthentication failed
i'm using my ubuntu server to join in my windows domain, so i have my samba managed by my windows groups. Everything is working fine but every 3-5 days, i'm getting this error:
...
- 11
2
votes
0
answers
464
views
Why can't I keep multiple Kerberos tickets
I currently want to ssh into two different realms. However, whenever I generate a ticket for 1 realm using pkinit, I lose the ticket I've generated for the other realm.
Why is this & how can I ...
- 251
0
votes
0
answers
2k
views
apt-get krb5-user unmet dependencies 1.14.3+dfsg-2ubuntu1?
I need to install krb5-user but I encounter the error below:
krb5-user : Depends: libkrb5-3 (= 1.14.3+dfsg-2) but
1.14.3+dfsg-2ubuntu1 is to be installed
I don't understand what does this mean ...
- 101
0
votes
2
answers
11k
views
mount cifs share on terminal fails (using password or kerberos krb5 ticket)
HOST: Kubuntu 16.04.3 LTS
LOCALHOST: Kubuntu 17.10
I'm not able anymore to mount a cifs share on a terminal:
mount -t cifs -o user=USER,domain=DOMAIN //HOST/share /mnt/tmp
Password for USER@//HOST/...
- 63
1
vote
1
answer
2k
views
Permission denied on mounted nfs folders
I'm trying to mount home directories over nfs on a few clients. Mounting works but I cannot cd /srv/nfs4: Permission denied. root can enter those mounted directories and read files there. Checking as ...
- 2,147
1
vote
0
answers
328
views
Cannot change password for local account [duplicate]
I have a non-root, local account where I have been unable to use 'passwd' as user root to change that password. The system is an AWS instance running Ubuntu 14.04 bound to Active Directory using both ...
- 11
0
votes
1
answer
2k
views
How can I mount a Windows folder and enforce its NTFS permissions?
I have an existing Ubuntu server. Users already sign into it with AD credentials. The problem is that there is a mounted file share - in a Windows environment, the users only have access to folders ...
- 1
0
votes
0
answers
2k
views
Ubuntu 17.10 - Kerberos/SSSD AD User login only sometimes works
I am new here, so please advise me, if I did miss something about the rules here.
We are running a network of computers in a Windows Server 2016 AD domain.
In Ubuntu 16.04 we configured Ubuntu to ...
- 1
1
vote
0
answers
741
views
AutoFS with Kerberos passing root UID instead of user UID at login, fails to mount
On a Ubuntu 16.04 test VM, I can automount my homedir (as CIFS in this example, NFSv4 behaves similarly), but only after I have already logged in. Apparently, autofs is passing UID=0 instead of my ...
- 11
0
votes
1
answer
2k
views
Trying to access kerberized NFS mount gives: 'ERROR: GSS-API: error in gss_acquire_cred()'
I have a kerberized NFS filesystem we're trying to access from an Ubuntu 16.04 client. The server is RHEL7. We can mount it successfully (as root):
mount -t nfs4 -o sec=krb5 colossal.ipa....
0
votes
1
answer
1k
views
pam / ad issue with lightdm
im having issues logging in the desktop via AD with my current setup with sssd, kerberos, samba, and AD. heres the output of the auth.log file. it seems that pam and lightdm aren't working well with ...
- 101
0
votes
0
answers
2k
views
Kadmin: Client not found
I'm attempting to join ubuntu 16.04 LTS to a windows AD. My goal is for this client machine to be able to log in with the Windows AD username and be able to access the Windows shares.
I started by ...
1
vote
0
answers
2k
views
SSSD ad authentication windows server 2012 R2
I want to login with AD users on a client with no gui. It is a Ubuntu 16.04 machine with SSSD. Active Directory server is Windows Server 2012 R2. I cannot login on console login with "aduser@srv.local"...
- 11
0
votes
1
answer
3k
views
Insufficient quota exists to complete the operation, net ads join
I'm trying to join Active Directory in Xubuntu 16.04 in a enterprise business enviroment so I'll change the name of my REALM by MY.EXAMPLE.CORP. My issue is: when I run
net ads join -U Administrator
...
- 1
3
votes
0
answers
940
views
Forwarded kerberos tickets cached in /tmp instead of keyring
I'm using Ubuntu 14.04 and 16.04. They're configured to cache kerb tickets in the kernel keyring via this setting in the [libdefaults] section of /etc/krb5.conf:
default_ccache_name = KEYRING:...
- 31
5
votes
2
answers
21k
views
rdesktop, credSSP and kerberos
I have installed the program rdesktop with the command
sudo apt-get install rdesktop
I use rdesktop with the command
rdesktop -a 32 192.168.0.38
with the error message
Disconnected due to ...
- 153
2
votes
1
answer
983
views
1
vote
1
answer
1k
views
GSSAPI ssh login on Ubuntu 14.04 with SSSD and Active Directory
I'm trying to move from 12.04LTS with likewise-open to 14.04LTS with sssd using realmd and I've got it working for the most part, but I can't get Kerberos SSO to work. Under likewise I was able to do ...
