Questions tagged [kerberos]

Kerberos is a network authentication protocol.

Filter by
Sorted by
Tagged with
0 votes
0 answers
110 views

How do I mount a Samba share using Kerberos credentials without pkilling gio?

Please see the following shell interaction for details. To summarize, with a clean boot, gio requests a user name and password instead of using Kerberos credentials. If I kill gvfs first, I can mount, ...
cqcallaw's user avatar
  • 1,113
0 votes
1 answer
452 views

Kerberos - Basic Workstation Authentication on ubuntu 22.04

I have configured Kerberos Server on Linux and it is working fine. Realm name is EXAMPLE.COM I do NOT have LDAP server at this time! On Ubuntu 22.04 Desktop I have installed "krb5-user" and &...
folow's user avatar
  • 211
0 votes
0 answers
50 views

libkrb5-dev install on databricks sometimes works, other times not

I’m facing issues when I try to install libkrb5-dev on databricks. Sometimes I can do the installation other times I get 404 Not Found [IP: 185.125.190.39 80] error. apt-get update, clean etc. won’t ...
u2dragon's user avatar
1 vote
1 answer
429 views

Kerberized NFS mounts stopped working with Ubuntu 21.10 (still in 22.10)

I'm running a Raspberry Pi 400 with Ubuntu. I used to have a working kerberized NFS connection to a Debian based NFS server using Ubuntu 20.04 LTS. Also I'm running another client with 20.04 LTS which ...
Ubuntu-one-mw's user avatar
-2 votes
1 answer
48 views

is it possible to install kerberos for different distros?

I want to install kerberos on AlmaLinux as server to manage ubuntu clients. is this possible? i read somewhere that in order to use kerberos, "Both devices have the same operating system". ...
Pejman Rezaei's user avatar
0 votes
0 answers
33 views

Samba Kerberos Can Add Computer to AD Network but Getting Login Error After Restart

Hi my samba working fine properly but getting error after an update Im getting an error of samba_dlz: disallowing update of signer, error=insufficient access
Jhonathan H.'s user avatar
0 votes
0 answers
859 views

Mounting Home Using AutoFS and CIFS and Kerberos to Network Path

I am attempting to implement AutoFS on realm joined Ubuntu 22.04 LTS machines to mount the user's home path via Kerberos authentication and a SMB/CIFS share but keep hitting a wall and am uncertain ...
adamoreo's user avatar
0 votes
1 answer
2k views

Stuck joining Ubuntu Studio 22.04.1 to Active Directory

I am trying to join my freshly installed Ubuntu Studio 22.04.1 to an AD domain hosted on my Synology NAS, by following the instructions in this white paper, starting on page 11 ("Joining After ...
R B's user avatar
  • 356
0 votes
1 answer
1k views

Samba net rpc rights grant SeDiskOperatorPrivilege: NT_STATUS_INVALID_TOKEN

I've just installed Ubuntu Server 22.04 and joining it to an existing AD as a member server. I'm following this howto: https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs Everything'...
Nienna's user avatar
  • 103
1 vote
0 answers
684 views

22.04 Samba with AD user - cannot access from Windows

Fresh 22.04 install. Only other configuration is NFS (which is working). Directories are 777. Configuration files: sssd.conf [sssd] domains = home.net config_file_version = 2 services = nss, pam [...
Thaddeus's user avatar
0 votes
0 answers
770 views

How to set up pam_mount?

I am trying to automount SMB shares from a Synology NAS on a client running Ubuntu Studio 18.04 (yes I know it is out of date and plan to upgrade to 20.04.2 soon). I have tried using autofs, but have ...
R B's user avatar
  • 356
1 vote
1 answer
898 views

Domain AD users aren't get discovered after adding Ubuntu under AD domain control

I've Joined a my ad domain with my Ubuntu 20.04.2 LTS VM (I followed this doc) and I'veJoined the AD domain with Ubuntu as sudo realm join -U Administrator win2016.local realm list show below output ...
Swapnil Kotwal's user avatar
0 votes
0 answers
1k views

KRB5 preauthentication failed

I try to authenticate on a Ubuntu 20.04 server joined to a Windows 2012 R2 AD domain, but it fails with "Preauthentication failed" errors. I have configured the Ubuntu server the same way I ...
scrouet's user avatar
1 vote
1 answer
137 views

Ssh conection issue

I'm trying to establish a connection with Fermilab servers. For this I use both Kerberos protocol and ssh to connect my computer; however I only receive kerberos ticket and this message from terminal ...
YAELARMANDO DENIZ HERNANDEZ's user avatar
0 votes
1 answer
2k views

How can AD users on Ubuntu client seamlessly access files and folders on Synology DC?

I have joined a PC running Ubuntu Studio 18.04 to an AD domain managed by Synology Directory Server. I can now log into the Ubuntu PC with the credentials of a domain user, but there are still two ...
R B's user avatar
  • 356
0 votes
0 answers
40 views

How to create an offline script with zip file to be run instead of running an apt-get install command? [duplicate]

I'm helping someone to install a Kerberos Linux Client on a Ubuntu 18.04 LTS server which is currently offline from the internet. This will be later used to setup authentication to connect to a Kakfa ...
Ricardo's user avatar
  • 139
0 votes
1 answer
38 views

OLD krb5-appl packages

All. Question: Do you know where to find package (or substitute package) on ubuntu 18? below: krb5-clients : Precise (12.04) : Ubuntu krb5-ftpd : Precise (12.04) : Ubuntu krb5-rsh-server : Precise (...
miwarin's user avatar
  • 133
2 votes
0 answers
1k views

Problem configuring MSSQL client and Kerberos authentication

I have a problem configuring an Ubuntu 18.04. client to connect to MSSQL Server using Windows Authentication. First of all, Kerberos/AD Login works fine using PAM and Winbind, connection using SQL ...
Alex's user avatar
  • 21
1 vote
1 answer
5k views

CIFS share on fstab via krb5

I have followed; https://warlord0blog.wordpress.com/2018/03/27/access-dfs-shares-from-linux/ Through this I can mount the cifs share manually, however when I try to mount it in the fstab via kerberos; ...
eekfonky's user avatar
  • 329
2 votes
1 answer
2k views

nfs with kerberos: permissions

I followed the following tutorial to configure nfsv4 with kerberos https://help.ubuntu.com/community/NFSv4Howto (with the difference that the NFS server is managed by zfsonlinux). Kerberos is here ...
bpnsrd's user avatar
  • 21
0 votes
1 answer
2k views

Unable to login with Xorg using Active Directory

Recently i've installed an Ubuntu 18.04 VM on Hyper-V with enhanced session enabled. Successfully joined it to Kerberos Realm in our corporate Active Directory. While i am using "su - username" i am ...
zay7sev's user avatar
  • 373
0 votes
0 answers
188 views

kerberized ssh client configuration on Ubuntu 16.04

Env:- 16.04.4 LTS (Xenial Xerus) 4.13.0-36-generic I'm following this article (https://wiki.ubuntu.com/Enterprise/Authentication/KerberosServices ) for setting up kerberised ssh. Tried with ...
user183980's user avatar
6 votes
5 answers
28k views

Edit Sudoers file to allow sudo rights to a AD domain group

I recently managed to get my Ubuntu Server 18.04 machine connected to my companies Windows AD. I am able to login with my AD credentials however I want to take it a step further... This is the ...
Hunter Lowe's user avatar
2 votes
2 answers
2k views

Wrong start and expire date in credentials cache after kerberos auth

I log in to Ubuntu 18.04 successfully with kerberos/sssd authentification in an ActiveDirectory domain. Since a few days I have an issue using my kerberos ticket/credentials cache to auth with some ...
pfleckenstein's user avatar
2 votes
1 answer
4k views

Unable to mount CIFS share using AutoFS and Kerberos

I can mount a CIFS share using mount directly from my terminal: sudo mount -t cifs -o multiuser,cruid=1395409773,vers=3.0,sec=krb5 //fileserver2.mba.ac.uk/Z\ Drive /mnt shows the following in /var/...
Auspex's user avatar
  • 1,088
1 vote
2 answers
359 views

Kerberos and Ubuntu 18

I am trying to configure a automated join to domain on my Ubuntu workstations. I have everything in place (I at least I believe so as the following command works fine) net ads join -U <username>...
Oscar's user avatar
  • 299
0 votes
1 answer
2k views

Package krb5-kdc is not available [duplicate]

Ubuntu Server 18.04 Tried: ~$ sudo apt-get update Hit:1 http://archive.ubuntu.com/ubuntu bionic InRelease Get:2 http://archive.ubuntu.com/ubuntu bionic-security InRelease [83.2 kB] Get:3 http://...
Little Mitch's user avatar
1 vote
0 answers
478 views

Integrate Ubuntu 18.04 box with one AD domain and user with other AD domain

I will try to explain my problem as simple as I can. I have the following problem: Our organization has two Active Directory forests, in one hand computer.forest.com has the computer objects, in the ...
jpdrummer's user avatar
1 vote
0 answers
632 views

18.04: NFS4 over Kerberos fails

On a 18.04-client NFS4 over Kerberos is fine against an old ubuntu 10.04 nfs4-server. It would not work however against a Netapp FAS3140 (which is accessible from 14.04 clients). client_18.04_# mount ...
rrg's user avatar
  • 41
2 votes
0 answers
4k views

realmd domain join with kinit in Ubuntu 18.04

I’m trying to set up an Ubuntu 18.04 machine and joining it to an Active Directory domain. Previously (e. g. on Ubuntu 17.10) I could do # kinit -kt /path/to/keytab my_username # realm join ad....
Socob's user avatar
  • 819
2 votes
0 answers
370 views

Printing to smb with kerberos auth?

I want to set up a printer via samba client to a Windows printserver. I managed to do it specifying this connection string: smb://user:pass@printserver/printer Is there a way to do auth through ...
Andrey Regentov's user avatar
0 votes
0 answers
539 views

Kerberos SSH Login

I'm trying to setup a ssh server ssh client kerberos server Now, on both the SSH server and client I can poll a ticket by calling, kinit -p root/admin. In SSH/SSHD config I set ...
MrSykkox's user avatar
  • 101
3 votes
1 answer
10k views

SSH with Kerberos authentication

I am encountering the following problem: I am trying to connect from a client VM to a server VM using SSH with Kerberos authentication, but SSH still asking me for password. Obviously, I modified the /...
michele_ub's user avatar
0 votes
1 answer
843 views

How can I configure local (USB) printers when a remote cups server is specified (in client.conf)?

In our organisation we have a central CUPS server (with Kerberos) for printing. On all Ubuntu clients this server is configured via the client.conf. How can I add additional local printers (USB) to ...
Uli's user avatar
  • 336
10 votes
1 answer
16k views

CIFS mounts and Kerberos - permissions on access or best practice

Currently our Ubuntu-Clients connect to cifs shares during system boot via /etc/fstab. This has the following disadvantages: Passwords are written in plain text as mount option The password should ...
user2149308's user avatar
0 votes
1 answer
790 views

How to specify home directory with 'adduser' when user creation fails on a machine with NFS home directory and Kerberos authentication

I am using adduser --disabled-password to create a user that uses Kerberos authentication for letting them sign into their account. Therefore, the password is predefined by a central Kerberos database....
benett's user avatar
  • 9
2 votes
1 answer
30k views

Kerberos authentication: clock skew too great

When trying kinit [email protected] I get [email protected]'s Password: kinit: krb5_get_init_creds: Clock skew too great What to do? Here is my timedatectl status $ timedatectl status ...
Viesturs's user avatar
  • 642
1 vote
0 answers
17k views

kerberos_kinit_password failed preauthentication failed

i'm using my ubuntu server to join in my windows domain, so i have my samba managed by my windows groups. Everything is working fine but every 3-5 days, i'm getting this error: ...
vinigobbi's user avatar
2 votes
0 answers
536 views

Why can't I keep multiple Kerberos tickets

I currently want to ssh into two different realms. However, whenever I generate a ticket for 1 realm using pkinit, I lose the ticket I've generated for the other realm. Why is this & how can I ...
user1245262's user avatar
0 votes
0 answers
2k views

apt-get krb5-user unmet dependencies 1.14.3+dfsg-2ubuntu1?

I need to install krb5-user but I encounter the error below: krb5-user : Depends: libkrb5-3 (= 1.14.3+dfsg-2) but 1.14.3+dfsg-2ubuntu1 is to be installed I don't understand what does this mean ...
user3782604's user avatar
0 votes
2 answers
15k views

mount cifs share on terminal fails (using password or kerberos krb5 ticket)

HOST: Kubuntu 16.04.3 LTS LOCALHOST: Kubuntu 17.10 I'm not able anymore to mount a cifs share on a terminal: mount -t cifs -o user=USER,domain=DOMAIN //HOST/share /mnt/tmp Password for USER@//HOST/...
Alexander's user avatar
1 vote
1 answer
2k views

Permission denied on mounted nfs folders

I'm trying to mount home directories over nfs on a few clients. Mounting works but I cannot cd /srv/nfs4: Permission denied. root can enter those mounted directories and read files there. Checking as ...
Florian Heinle's user avatar
1 vote
0 answers
329 views

Cannot change password for local account [duplicate]

I have a non-root, local account where I have been unable to use 'passwd' as user root to change that password. The system is an AWS instance running Ubuntu 14.04 bound to Active Directory using both ...
Marty Combs's user avatar
0 votes
1 answer
2k views

How can I mount a Windows folder and enforce its NTFS permissions?

I have an existing Ubuntu server. Users already sign into it with AD credentials. The problem is that there is a mounted file share - in a Windows environment, the users only have access to folders ...
sacocats's user avatar
0 votes
0 answers
2k views

Ubuntu 17.10 - Kerberos/SSSD AD User login only sometimes works

I am new here, so please advise me, if I did miss something about the rules here. We are running a network of computers in a Windows Server 2016 AD domain. In Ubuntu 16.04 we configured Ubuntu to ...
P. jee's user avatar
  • 1
1 vote
0 answers
850 views

AutoFS with Kerberos passing root UID instead of user UID at login, fails to mount

On a Ubuntu 16.04 test VM, I can automount my homedir (as CIFS in this example, NFSv4 behaves similarly), but only after I have already logged in. Apparently, autofs is passing UID=0 instead of my ...
drchrist68's user avatar
0 votes
1 answer
3k views

Trying to access kerberized NFS mount gives: 'ERROR: GSS-API: error in gss_acquire_cred()'

I have a kerberized NFS filesystem we're trying to access from an Ubuntu 16.04 client. The server is RHEL7. We can mount it successfully (as root): mount -t nfs4 -o sec=krb5 colossal.ipa....
Robert Sturrock's user avatar
0 votes
1 answer
2k views

pam / ad issue with lightdm

im having issues logging in the desktop via AD with my current setup with sssd, kerberos, samba, and AD. heres the output of the auth.log file. it seems that pam and lightdm aren't working well with ...
Matthew Morcaldi's user avatar
0 votes
0 answers
3k views

Kadmin: Client not found

I'm attempting to join ubuntu 16.04 LTS to a windows AD. My goal is for this client machine to be able to log in with the Windows AD username and be able to access the Windows shares. I started by ...
ultimoblaze's user avatar
1 vote
0 answers
2k views

SSSD ad authentication windows server 2012 R2

I want to login with AD users on a client with no gui. It is a Ubuntu 16.04 machine with SSSD. Active Directory server is Windows Server 2012 R2. I cannot login on console login with "[email protected]"...
Xenioz's user avatar
  • 11