Questions tagged [kerberos]
Kerberos is a network authentication protocol.
54
questions with no upvoted or accepted answers
4
votes
1
answer
10k
views
Samba Share not accessible with AD user
I try to install a samba server for active directory authentication and shares.
I managed to configure kerberos (kinit klist works)
I configured smb.conf.
wbinfo -u<br>
wbinfo -g<br>
...
- 41
3
votes
0
answers
1k
views
Forwarded kerberos tickets cached in /tmp instead of keyring
I'm using Ubuntu 14.04 and 16.04. They're configured to cache kerb tickets in the kernel keyring via this setting in the [libdefaults] section of /etc/krb5.conf:
default_ccache_name = KEYRING:...
- 31
2
votes
0
answers
2k
views
Problem configuring MSSQL client and Kerberos authentication
I have a problem configuring an Ubuntu 18.04. client to connect to MSSQL Server using Windows Authentication.
First of all, Kerberos/AD Login works fine using PAM and Winbind, connection using SQL ...
- 21
2
votes
0
answers
4k
views
realmd domain join with kinit in Ubuntu 18.04
I’m trying to set up an Ubuntu 18.04 machine and joining it to an Active Directory domain. Previously (e. g. on Ubuntu 17.10) I could do
# kinit -kt /path/to/keytab my_username
# realm join ad....
- 849
2
votes
0
answers
405
views
Printing to smb with kerberos auth?
I want to set up a printer via samba client to a Windows printserver.
I managed to do it specifying this connection string:
smb://user:pass@printserver/printer
Is there a way to do auth through ...
- 123
2
votes
0
answers
566
views
Why can't I keep multiple Kerberos tickets
I currently want to ssh into two different realms. However, whenever I generate a ticket for 1 realm using pkinit, I lose the ticket I've generated for the other realm.
Why is this & how can I ...
- 273
2
votes
0
answers
524
views
Multiple DC's in the krb5.conf realms
I have the following configuration in my /etc/krb5.conf (note this is only part of the config):
[libdefaults]
ticket_lifetime = 24h
default_realm = HQ.LOCAL
forwardable = true
[realms]
...
- 151
2
votes
0
answers
843
views
Hostname / VPN / NFS / Kerberos
At home I'm running Ubuntu Server 14.04.1 with Kerberised NFS Shares.
The NFS clients obtain their full FDQN via DHCP.
When away from home and trying to access NFS shares via VPN, Kinit fails with:
...
- 91
2
votes
0
answers
2k
views
I have a problem with domain trust between Samba and AD
I configured Samba PDC and AD Domain.
Here is my Topology.
And I saw that Samba PDC loading AD users.
With getent passwd command and wbinfo -ug command.
Here is my getent passwd result.
root@Lin-srv:~#...
- 21
1
vote
0
answers
734
views
mount with cifs and sec=krb5 fails with "Required key not available"
The problem
First time posting here, and also not the most super experienced ubuntu user, so I hope that I can describe my problem well enough.
I am trying to mount a windows fileshare to our ubuntu ...
- 21
1
vote
0
answers
799
views
22.04 Samba with AD user - cannot access from Windows
Fresh 22.04 install. Only other configuration is NFS (which is working). Directories are 777. Configuration files:
sssd.conf
[sssd]
domains = home.net
config_file_version = 2
services = nss, pam
[...
- 11
1
vote
1
answer
1k
views
Domain AD users aren't get discovered after adding Ubuntu under AD domain control
I've Joined a my ad domain with my Ubuntu 20.04.2 LTS VM (I followed this doc) and I'veJoined the AD domain with Ubuntu as
sudo realm join -U Administrator win2016.local
realm list show below output
...
- 111
1
vote
1
answer
150
views
Ssh conection issue
I'm trying to establish a connection with Fermilab servers. For this I use both Kerberos protocol and ssh to connect my computer; however I only receive kerberos ticket and this message from terminal ...
1
vote
0
answers
478
views
Integrate Ubuntu 18.04 box with one AD domain and user with other AD domain
I will try to explain my problem as simple as I can. I have the following problem:
Our organization has two Active Directory forests, in one hand computer.forest.com has the computer objects, in the ...
- 11
1
vote
0
answers
649
views
18.04: NFS4 over Kerberos fails
On a 18.04-client NFS4 over Kerberos is fine against an old ubuntu 10.04 nfs4-server. It would not work however against a Netapp FAS3140 (which is accessible from 14.04 clients).
client_18.04_# mount ...
- 41
1
vote
0
answers
18k
views
kerberos_kinit_password failed preauthentication failed
i'm using my ubuntu server to join in my windows domain, so i have my samba managed by my windows groups. Everything is working fine but every 3-5 days, i'm getting this error:
...
- 11
1
vote
0
answers
912
views
AutoFS with Kerberos passing root UID instead of user UID at login, fails to mount
On a Ubuntu 16.04 test VM, I can automount my homedir (as CIFS in this example, NFSv4 behaves similarly), but only after I have already logged in. Apparently, autofs is passing UID=0 instead of my ...
- 11
1
vote
0
answers
2k
views
SSSD ad authentication windows server 2012 R2
I want to login with AD users on a client with no gui. It is a Ubuntu 16.04 machine with SSSD. Active Directory server is Windows Server 2012 R2. I cannot login on console login with "[email protected]"...
- 11
1
vote
0
answers
5k
views
Problem with AD user authentication after joining Windows Domain
I've been trying to add my linux machine into the AD of my office in order to work without problems. I started following this guide: SSSD and Active Directory in my ubuntu 16.04 (fresh install) and ...
- 11
1
vote
1
answer
337
views
Connect with an AD user to a ubuntu Machine
I try to log on under a ubuntu machine with an AD user via the GUI lightdm , but access is denied with "invalid password , please try again "
My machine has been added in the AD : net ads join -U ...
- 11
1
vote
0
answers
1k
views
winbind and passwd issues
I successfully configured a Ubuntu 15.10 Workstation to authenticate against Active Directory. The only thing left so far is the ability to change the Active Directory password. When I enter the ...
- 11
1
vote
0
answers
648
views
Kerberos TGT in default session gnome-keyring
I am using a 3rd party kerberos kit to authenticate to my work site. In RHEL/CentOS, my ticket is saved into the default session gnome-keyring; yet I am missing something with Ubuntu. When I kinit, ...
- 11
1
vote
0
answers
408
views
Kerberized NFSv4 no write permission
I have some trouble with installing NFSv4 with Kerberos. I can't write on my NFSv4-Share.
That's my /etc/exports:
/srv/export/ gss/krb5p(rw,fsid=0,no_subtree_check,async,no_root_squash)
Thats ...
- 111
1
vote
0
answers
2k
views
Where is krb5_util on Ubuntu 14.04?
The crucial krb5_util command (http://web.mit.edu/kerberos/krb5-latest/doc/admin/admin_commands/kdb5_util.html#kdb5-util-8) doesn't seem to be available on Ubuntu 14.04 although it ships with 1.12.x ...
- 6,190
1
vote
1
answer
641
views
kerberos ticket watcher
I just switched from openSuSe to Ubuntu 12.04. At work we use kerberos to auth to different systems. In openSuSe I had a nice little tray app "kerberos ticket watcher" that could renew and initialise ...
- 11
1
vote
1
answer
2k
views
Ubuntu : Kerberos With LDAP
I am using ubuntu 12.04. I am installing LDAP with Kerberos authentication. I followed the steps in the ubuntu documentation.
https://help.ubuntu.com/12.04/serverguide/kerberos-ldap.html
After ...
- 111
1
vote
0
answers
6k
views
Kerberos SSO with Apache - Partly works
Ok...
I've got my Apache server running, and I have Kerberos configured to integrate with our primary domain controller (Windows 2003).
When I try to access my page, however, I get a login prompt......
- 39.5k
0
votes
0
answers
34
views
Active Directory user group not updating
I updated my AD user account with new groups, and my Ubuntu 22.04 and 20.04 systems aren't getting the new groups.
I have to clear the cache and restart SSSD to fix it.
Is there a more permanent ...
- 693
0
votes
0
answers
108
views
Cannot make Active Directory offline connection persistent
After several weeks of tries and failure, I finally need to ask for help.
For starters, I use Ubuntu 22.04 LTS, that I have setup with winbind, PAM, Kerberos.
Overall, I am trying to make a ...
0
votes
0
answers
48
views
How to fix "credential reinitialization in a setuid context ignored"?
I'm using Ubuntu 22.04 with Kerberos authentication. Every time I use sudo, the following error is logged by the system:
pam_krb5(sudo:setcred): (user ****) credential reinitialization in a setuid ...
- 861
0
votes
0
answers
751
views
connecting 22.04 LTS to Active Directory: GSSAPI Error [...] (Server not found in Kerberos database)
I am trying to connect the Ubuntu computers of my department to our active directory which worked well for quiet some of them by now. However, currently I stuck with a computer that has recently been ...
- 1
0
votes
0
answers
607
views
How do I mount a Samba share using Kerberos credentials without pkilling gio?
Please see the following shell interaction for details. To summarize, with a clean boot, gio requests a user name and password instead of using Kerberos credentials. If I kill gvfs first, I can mount, ...
- 1,113
0
votes
1
answer
1k
views
Kerberos - Basic Workstation Authentication on ubuntu 22.04
I have configured Kerberos Server on Linux and it is working fine. Realm name is EXAMPLE.COM
I do NOT have LDAP server at this time!
On Ubuntu 22.04 Desktop I have installed "krb5-user" and &...
- 211
0
votes
1
answer
136
views
libkrb5-dev install on databricks sometimes works, other times not
I’m facing issues when I try to install libkrb5-dev on databricks. Sometimes I can do the installation other times I get 404 Not Found [IP: 185.125.190.39 80] error.
apt-get update, clean etc. won’t ...
- 1
0
votes
0
answers
1k
views
Mounting Home Using AutoFS and CIFS and Kerberos to Network Path
I am attempting to implement AutoFS on realm joined Ubuntu 22.04 LTS machines to mount the user's home path via Kerberos authentication and a SMB/CIFS share but keep hitting a wall and am uncertain ...
- 1
0
votes
1
answer
3k
views
Stuck joining Ubuntu Studio 22.04.1 to Active Directory
I am trying to join my freshly installed Ubuntu Studio 22.04.1 to an AD domain hosted on my Synology NAS, by following the instructions in this white paper, starting on page 11 ("Joining After ...
- 316
0
votes
0
answers
992
views
How to set up pam_mount?
I am trying to automount SMB shares from a Synology NAS on a client running Ubuntu Studio 18.04 (yes I know it is out of date and plan to upgrade to 20.04.2 soon). I have tried using autofs, but have ...
- 316
0
votes
0
answers
2k
views
KRB5 preauthentication failed
I try to authenticate on a Ubuntu 20.04 server joined to a Windows 2012 R2 AD domain, but it fails with "Preauthentication failed" errors. I have configured the Ubuntu server the same way I ...
- 1
0
votes
1
answer
2k
views
How can AD users on Ubuntu client seamlessly access files and folders on Synology DC?
I have joined a PC running Ubuntu Studio 18.04 to an AD domain managed by Synology Directory Server. I can now log into the Ubuntu PC with the credentials of a domain user, but there are still two ...
- 316
0
votes
1
answer
2k
views
Unable to login with Xorg using Active Directory
Recently i've installed an Ubuntu 18.04 VM on Hyper-V with enhanced session enabled.
Successfully joined it to Kerberos Realm in our corporate Active Directory.
While i am using "su - username" i am ...
- 373
0
votes
0
answers
194
views
kerberized ssh client configuration on Ubuntu 16.04
Env:- 16.04.4 LTS (Xenial Xerus)
4.13.0-36-generic
I'm following this article (https://wiki.ubuntu.com/Enterprise/Authentication/KerberosServices ) for setting up kerberised ssh. Tried with ...
- 531
0
votes
0
answers
588
views
Kerberos SSH Login
I'm trying to setup a
ssh server
ssh client
kerberos server
Now, on both the SSH server and client I can poll a ticket by calling, kinit -p root/admin.
In SSH/SSHD config I set
...
- 101
0
votes
1
answer
947
views
How can I configure local (USB) printers when a remote cups server is specified (in client.conf)?
In our organisation we have a central CUPS server (with Kerberos) for printing. On all Ubuntu clients this server is configured via the client.conf.
How can I add additional local printers (USB) to ...
- 336
0
votes
0
answers
3k
views
apt-get krb5-user unmet dependencies 1.14.3+dfsg-2ubuntu1?
I need to install krb5-user but I encounter the error below:
krb5-user : Depends: libkrb5-3 (= 1.14.3+dfsg-2) but
1.14.3+dfsg-2ubuntu1 is to be installed
I don't understand what does this mean ...
- 101
0
votes
1
answer
2k
views
How can I mount a Windows folder and enforce its NTFS permissions?
I have an existing Ubuntu server. Users already sign into it with AD credentials. The problem is that there is a mounted file share - in a Windows environment, the users only have access to folders ...
- 1
0
votes
0
answers
2k
views
Ubuntu 17.10 - Kerberos/SSSD AD User login only sometimes works
I am new here, so please advise me, if I did miss something about the rules here.
We are running a network of computers in a Windows Server 2016 AD domain.
In Ubuntu 16.04 we configured Ubuntu to ...
- 1
0
votes
1
answer
2k
views
pam / ad issue with lightdm
im having issues logging in the desktop via AD with my current setup with sssd, kerberos, samba, and AD. heres the output of the auth.log file. it seems that pam and lightdm aren't working well with ...
- 101
0
votes
0
answers
3k
views
Kadmin: Client not found
I'm attempting to join ubuntu 16.04 LTS to a windows AD. My goal is for this client machine to be able to log in with the Windows AD username and be able to access the Windows shares.
I started by ...
0
votes
1
answer
2k
views
/etc/hosts configuration error , ping not working
I am newbie to ubuntu plus kerberos , trying to configure kerberos in my vm ubuntu by i am not able to pass the step 2 in configuring hosts .below are the files. i am in the process of learning so ...
0
votes
1
answer
274
views
Share directories with Active Directory users
I need to configure an Ubuntu, to share directories. The allowed users are in an Active Directory in Windows 2003 server. Can I use ntlm for that or only kerberos?
- 1