Questions tagged [kerberos]
Kerberos is a network authentication protocol.
94
questions
17
votes
1
answer
3k
views
Setup for mounting kerberized nfs home directory - gssd not finding valid kerberos ticket
Our home directories are exported via kerberized nfs, so the user needs a valid kerberos ticket to be able to mount its home. This setup works fine with our existing clients & server.
Now we want ...
- 271
13
votes
2
answers
15k
views
rails & libpq-dev nasty dependencies
I don't know if this question belongs here, but I'll take a shot. Hi. I'm running ubuntu 11.10 dual-boot with windows vista on my machine. On Ubuntu, I've installed RVM, rails gem, & PostgreSQL (...
- 365
12
votes
3
answers
22k
views
How do I configure a default principal for kinit (acquiring Kerberos ticket)?
When using kinit to acquire a Kerberos ticket I have configured it to use a default realm, e.g. GERT.LAN by editing /etc/krb5.conf:
[libdefaults]
default_realm = GERT.LAN
That's great since ...
- 68k
10
votes
1
answer
17k
views
CIFS mounts and Kerberos - permissions on access or best practice
Currently our Ubuntu-Clients connect to cifs shares during system boot via /etc/fstab. This has the following disadvantages:
Passwords are written in plain text as mount option
The password should ...
- 305
7
votes
5
answers
35k
views
Edit Sudoers file to allow sudo rights to a AD domain group
I recently managed to get my Ubuntu Server 18.04 machine connected to my companies Windows AD. I am able to login with my AD credentials however I want to take it a step further...
This is the ...
- 105
6
votes
2
answers
29k
views
rdesktop, credSSP and kerberos
I have installed the program rdesktop with the command
sudo apt-get install rdesktop
I use rdesktop with the command
rdesktop -a 32 192.168.0.38
with the error message
Disconnected due to ...
- 163
4
votes
1
answer
13k
views
SSH with Kerberos authentication
I am encountering the following problem: I am trying to connect from a client VM to a server VM using SSH with Kerberos authentication, but SSH still asking me for password. Obviously, I modified the /...
- 397
4
votes
1
answer
10k
views
Samba Share not accessible with AD user
I try to install a samba server for active directory authentication and shares.
I managed to configure kerberos (kinit klist works)
I configured smb.conf.
wbinfo -u<br>
wbinfo -g<br>
...
- 41
3
votes
0
answers
1k
views
Forwarded kerberos tickets cached in /tmp instead of keyring
I'm using Ubuntu 14.04 and 16.04. They're configured to cache kerb tickets in the kernel keyring via this setting in the [libdefaults] section of /etc/krb5.conf:
default_ccache_name = KEYRING:...
- 31
2
votes
1
answer
33k
views
Kerberos authentication: clock skew too great
When trying
kinit [email protected]
I get
[email protected]'s Password:
kinit: krb5_get_init_creds: Clock skew too great
What to do?
Here is my timedatectl status
$ timedatectl status
...
- 652
2
votes
1
answer
4k
views
Unable to mount CIFS share using AutoFS and Kerberos
I can mount a CIFS share using mount directly from my terminal:
sudo mount -t cifs -o multiuser,cruid=1395409773,vers=3.0,sec=krb5 //fileserver2.mba.ac.uk/Z\ Drive /mnt
shows the following in /var/...
- 1,124
2
votes
1
answer
1k
views
2
votes
1
answer
7k
views
Samba share not accessible from Windows 7 (on domain) via hostname
I have spent several days attempting to solve this- none of the answers on this forum or any other were able to help. I tried everything. I read the entire Samba manual. Nothing worked.
Happily, I ...
- 227
2
votes
1
answer
2k
views
nfs with kerberos: permissions
I followed the following tutorial to configure nfsv4 with kerberos https://help.ubuntu.com/community/NFSv4Howto
(with the difference that the NFS server is managed by zfsonlinux).
Kerberos is here ...
- 21
2
votes
1
answer
303
views
"AND Operator" in PAM
I need to prevent users from authenticating through Kerberos when the encrypted /home/users has not yet been mounted. (This is to avoid corrupting the ecryptfs mountpoint)
Currently I have these ...
- 1,902
2
votes
1
answer
190
views
Setup Kerberos authentication with SSH
I have an Ubuntu server acting as the Domain Controller (domain.local) and a Ubuntu VM (ubu1) acting as a workstation. I wanted to ssh into the ubu1 VM with Kerberose using a keytab file.
For this, I ...
2
votes
0
answers
2k
views
Problem configuring MSSQL client and Kerberos authentication
I have a problem configuring an Ubuntu 18.04. client to connect to MSSQL Server using Windows Authentication.
First of all, Kerberos/AD Login works fine using PAM and Winbind, connection using SQL ...
- 21
2
votes
2
answers
2k
views
Wrong start and expire date in credentials cache after kerberos auth
I log in to Ubuntu 18.04 successfully with kerberos/sssd authentification in an ActiveDirectory domain.
Since a few days I have an issue using my kerberos ticket/credentials cache to auth with some ...
2
votes
0
answers
4k
views
realmd domain join with kinit in Ubuntu 18.04
I’m trying to set up an Ubuntu 18.04 machine and joining it to an Active Directory domain. Previously (e. g. on Ubuntu 17.10) I could do
# kinit -kt /path/to/keytab my_username
# realm join ad....
- 839
2
votes
0
answers
404
views
Printing to smb with kerberos auth?
I want to set up a printer via samba client to a Windows printserver.
I managed to do it specifying this connection string:
smb://user:pass@printserver/printer
Is there a way to do auth through ...
- 123
2
votes
0
answers
565
views
Why can't I keep multiple Kerberos tickets
I currently want to ssh into two different realms. However, whenever I generate a ticket for 1 realm using pkinit, I lose the ticket I've generated for the other realm.
Why is this & how can I ...
- 273
2
votes
0
answers
523
views
Multiple DC's in the krb5.conf realms
I have the following configuration in my /etc/krb5.conf (note this is only part of the config):
[libdefaults]
ticket_lifetime = 24h
default_realm = HQ.LOCAL
forwardable = true
[realms]
...
- 151
2
votes
0
answers
843
views
Hostname / VPN / NFS / Kerberos
At home I'm running Ubuntu Server 14.04.1 with Kerberised NFS Shares.
The NFS clients obtain their full FDQN via DHCP.
When away from home and trying to access NFS shares via VPN, Kinit fails with:
...
- 91
2
votes
0
answers
2k
views
I have a problem with domain trust between Samba and AD
I configured Samba PDC and AD Domain.
Here is my Topology.
And I saw that Samba PDC loading AD users.
With getent passwd command and wbinfo -ug command.
Here is my getent passwd result.
root@Lin-srv:~#...
- 21
1
vote
2
answers
380
views
Kerberos and Ubuntu 18
I am trying to configure a automated join to domain on my Ubuntu workstations. I have everything in place (I at least I believe so as the following command works fine)
net ads join -U <username>...
- 299
1
vote
1
answer
189
views
LDAP - benefits and challenges instead of local user management [closed]
I have been looking at LDAP + Kerberos for my setup.
I am wondering what is the benefits and challenges with using LDAP + Kerberos instead of local user manangement. I know that LDAP can be used for ...
- 47
1
vote
1
answer
5k
views
authentication method for likewise to join a domain
I installed likewise and joined my an active directory domain.
I'm finding it's a bit unclear on how the default authentication works.
Do I have to do any extra configuration to enable kerberos?
If I ...
- 813
1
vote
1
answer
819
views
Kerberos with Active Directory
So I've setup kerberos on Ubuntu in various ways (likewise-open, winbind, etc) and keep coming up with the same problem. kinit works fine and I get the initial ticket, but when I try to access a proxy ...
- 148
1
vote
1
answer
885
views
Kerberized NFS mounts stopped working with Ubuntu 21.10 (still in 22.10)
I'm running a Raspberry Pi 400 with Ubuntu. I used to have a working kerberized NFS connection to a Debian based NFS server using Ubuntu 20.04 LTS. Also I'm running another client with 20.04 LTS which ...
1
vote
1
answer
5k
views
CIFS share on fstab via krb5
I have followed; https://warlord0blog.wordpress.com/2018/03/27/access-dfs-shares-from-linux/
Through this I can mount the cifs share manually, however when I try to mount it in the fstab via kerberos;
...
- 329
1
vote
2
answers
16k
views
mount cifs share on terminal fails (using password or kerberos krb5 ticket)
HOST: Kubuntu 16.04.3 LTS
LOCALHOST: Kubuntu 17.10
I'm not able anymore to mount a cifs share on a terminal:
mount -t cifs -o user=USER,domain=DOMAIN //HOST/share /mnt/tmp
Password for USER@//HOST/...
- 73
1
vote
1
answer
13k
views
Kerberos - Active Directory Domain Failure (Ubuntu)
I try to join Active Directory and Samba 4 in Ubuntu 12.04.05.
When I run host -t SRV _kerberos._udp.test.sg I get the error:
Host _kerberos._udp.test.sg not found: 3(NXDOMAIN)
meanwhile
$# host -...
- 21
1
vote
3
answers
22k
views
SSSD password change not working with LDAP backend
Environment info:
AD on win 2k8r2
Ubuntu 12.04.5 LTS
SSSD v1.8.6
everything is in the same vlan
I have an LDAP / SSSD solution in use on our Ubuntu servers. The auth process works correctly - ...
- 565
1
vote
1
answer
408
views
What are the difference between maxlife and maxrenewlife in kerberos?
I want to know if I set maxlife to three day, but my ticket issued only a day. So I want t o know the difference between maxlife and maxrenewlife.
- 148
1
vote
1
answer
2k
views
Kerberos and google-authenticator (2-factor auth)
Does anyone know how can I use google-authenticator in combination with kerberos and thus provide to my users 2-factor authentication?
- 141
1
vote
0
answers
684
views
mount with cifs and sec=krb5 fails with "Required key not available"
The problem
First time posting here, and also not the most super experienced ubuntu user, so I hope that I can describe my problem well enough.
I am trying to mount a windows fileshare to our ubuntu ...
- 21
1
vote
0
answers
798
views
22.04 Samba with AD user - cannot access from Windows
Fresh 22.04 install. Only other configuration is NFS (which is working). Directories are 777. Configuration files:
sssd.conf
[sssd]
domains = home.net
config_file_version = 2
services = nss, pam
[...
- 11
1
vote
1
answer
1k
views
Domain AD users aren't get discovered after adding Ubuntu under AD domain control
I've Joined a my ad domain with my Ubuntu 20.04.2 LTS VM (I followed this doc) and I'veJoined the AD domain with Ubuntu as
sudo realm join -U Administrator win2016.local
realm list show below output
...
- 111
1
vote
1
answer
150
views
Ssh conection issue
I'm trying to establish a connection with Fermilab servers. For this I use both Kerberos protocol and ssh to connect my computer; however I only receive kerberos ticket and this message from terminal ...
1
vote
0
answers
478
views
Integrate Ubuntu 18.04 box with one AD domain and user with other AD domain
I will try to explain my problem as simple as I can. I have the following problem:
Our organization has two Active Directory forests, in one hand computer.forest.com has the computer objects, in the ...
- 11
1
vote
0
answers
649
views
18.04: NFS4 over Kerberos fails
On a 18.04-client NFS4 over Kerberos is fine against an old ubuntu 10.04 nfs4-server. It would not work however against a Netapp FAS3140 (which is accessible from 14.04 clients).
client_18.04_# mount ...
- 41
1
vote
0
answers
18k
views
kerberos_kinit_password failed preauthentication failed
i'm using my ubuntu server to join in my windows domain, so i have my samba managed by my windows groups. Everything is working fine but every 3-5 days, i'm getting this error:
...
- 11
1
vote
1
answer
3k
views
Permission denied on mounted nfs folders
I'm trying to mount home directories over nfs on a few clients. Mounting works but I cannot cd /srv/nfs4: Permission denied. root can enter those mounted directories and read files there. Checking as ...
- 2,187
1
vote
0
answers
329
views
Cannot change password for local account [duplicate]
I have a non-root, local account where I have been unable to use 'passwd' as user root to change that password. The system is an AWS instance running Ubuntu 14.04 bound to Active Directory using both ...
- 11
1
vote
0
answers
909
views
AutoFS with Kerberos passing root UID instead of user UID at login, fails to mount
On a Ubuntu 16.04 test VM, I can automount my homedir (as CIFS in this example, NFSv4 behaves similarly), but only after I have already logged in. Apparently, autofs is passing UID=0 instead of my ...
- 11
1
vote
0
answers
2k
views
SSSD ad authentication windows server 2012 R2
I want to login with AD users on a client with no gui. It is a Ubuntu 16.04 machine with SSSD. Active Directory server is Windows Server 2012 R2. I cannot login on console login with "[email protected]"...
- 11
1
vote
1
answer
2k
views
GSSAPI ssh login on Ubuntu 14.04 with SSSD and Active Directory
I'm trying to move from 12.04LTS with likewise-open to 14.04LTS with sssd using realmd and I've got it working for the most part, but I can't get Kerberos SSO to work. Under likewise I was able to do ...
1
vote
0
answers
5k
views
Problem with AD user authentication after joining Windows Domain
I've been trying to add my linux machine into the AD of my office in order to work without problems. I started following this guide: SSSD and Active Directory in my ubuntu 16.04 (fresh install) and ...
- 11
1
vote
1
answer
337
views
Connect with an AD user to a ubuntu Machine
I try to log on under a ubuntu machine with an AD user via the GUI lightdm , but access is denied with "invalid password , please try again "
My machine has been added in the AD : net ads join -U ...
- 11
1
vote
0
answers
1k
views
winbind and passwd issues
I successfully configured a Ubuntu 15.10 Workstation to authenticate against Active Directory. The only thing left so far is the ability to change the Active Directory password. When I enter the ...
- 11