Ask Ubuntu
Ask Ubuntu

Questions tagged [kerberos]

Kerberos is a network authentication protocol.

It is designed to provide strong authentication for client/server applications by using secret-key cryptography.

95 questions
17
votes
1 answer

Setup for mounting kerberized nfs home directory - gssd not finding valid kerberos ticket

Our home directories are exported via kerberized nfs, so the user needs a valid kerberos ticket to be able to mount its home. This setup works fine with our existing clients & server. Now we want to add some 11.10 client and thus set up ldap &…
jan bernlöhr
  • 271
13
votes
2 answers

rails & libpq-dev nasty dependencies

I don't know if this question belongs here, but I'll take a shot. Hi. I'm running ubuntu 11.10 dual-boot with windows vista on my machine. On Ubuntu, I've installed RVM, rails gem, & PostgreSQL (the postgres server, client, & other packages like…
PatrixCR
  • 375
12
votes
3 answers

How do I configure a default principal for kinit (acquiring Kerberos ticket)?

When using kinit to acquire a Kerberos ticket I have configured it to use a default realm, e.g. GERT.LAN by editing /etc/krb5.conf: [libdefaults] default_realm = GERT.LAN That's great since I don't have to supply that all the time on the…
gertvdijk
  • 69,427
12
votes
1 answer

CIFS mounts and Kerberos - permissions on access or best practice

Currently our Ubuntu-Clients connect to cifs shares during system boot via /etc/fstab. This has the following disadvantages: Passwords are written in plain text as mount option The password should expire, but if it does, the /etc/fstab has to be…
user2149308
  • 345
9
votes
5 answers

Edit Sudoers file to allow sudo rights to a AD domain group

I recently managed to get my Ubuntu Server 18.04 machine connected to my companies Windows AD. I am able to login with my AD credentials however I want to take it a step further... This is the article I followed in order to get my Ubuntu 18.04…
Hunter Lowe
  • 125
7
votes
3 answers

rdesktop, credSSP and kerberos

I have installed the program rdesktop with the command sudo apt-get install rdesktop I use rdesktop with the command rdesktop -a 32 192.168.0.38 with the error message Disconnected due to network error, retrying to reconnect for 70 minutes.…
Fred
  • 173
4
votes
1 answer

Samba Share not accessible with AD user

I try to install a samba server for active directory authentication and shares. I managed to configure kerberos (kinit klist works) I configured smb.conf. wbinfo -u
wbinfo -g
getent group *showing all domain groups)
getent users (showing…
user305136
  • 41
  • 1
  • 1
  • 3
4
votes
1 answer

SSH with Kerberos authentication

I am encountering the following problem: I am trying to connect from a client VM to a server VM using SSH with Kerberos authentication, but SSH still asking me for password. Obviously, I modified the /etc/ssh/sshd_config file, on server side, to…
michele_ub
  • 397
3
votes
0 answers

Forwarded kerberos tickets cached in /tmp instead of keyring

I'm using Ubuntu 14.04 and 16.04. They're configured to cache kerb tickets in the kernel keyring via this setting in the [libdefaults] section of /etc/krb5.conf: default_ccache_name = KEYRING:persistent:%{uid} This works fine if I kinit (tickets…
shiela
  • 31
  • 4
3
votes
1 answer

Setup Kerberos authentication with SSH

I have an Ubuntu server acting as the Domain Controller (domain.local) and a Ubuntu VM (ubu1) acting as a workstation. I wanted to ssh into the ubu1 VM with Kerberose using a keytab file. For this, I set up OpenSSH in my ubu1 VM. I enabled the…
Kavishka Gihan
  • 131
2
votes
0 answers

Why can't I keep multiple Kerberos tickets

I currently want to ssh into two different realms. However, whenever I generate a ticket for 1 realm using pkinit, I lose the ticket I've generated for the other realm. Why is this & how can I fix it?
user1245262
  • 273
  • 2
  • 10
2
votes
1 answer

Kerberos and UID/GID mapping

Is Kerberos needed for proper UID/GID mapping for a NFS system?
Svetlana Belkin
  • 1,175
2
votes
0 answers

Multiple DC's in the krb5.conf realms

I have the following configuration in my /etc/krb5.conf (note this is only part of the config): [libdefaults] ticket_lifetime = 24h default_realm = HQ.LOCAL forwardable = true [realms] HQ.LOCAL = { hq = 192.168.100.2 …
CodeLikeBeaker
  • 151
2
votes
0 answers

Hostname / VPN / NFS / Kerberos

At home I'm running Ubuntu Server 14.04.1 with Kerberised NFS Shares. The NFS clients obtain their full FDQN via DHCP. When away from home and trying to access NFS shares via VPN, Kinit fails with: kinit: Cannot determine realm for host (principal…
biscuitNinja
  • 91
2
votes
0 answers

I have a problem with domain trust between Samba and AD

I configured Samba PDC and AD Domain. Here is my Topology. And I saw that Samba PDC loading AD users. With getent passwd command and wbinfo -ug command. Here is my getent passwd result. root@Lin-srv:~# getent…
Jun-gi Hong
  • 21
1
2 3 4 5 6 7