Hi, I have installed a fds 1.1 on centos. I would like to use the kerberos authentication feature from my MS ActiveDirectory Domäin. I am new with kerberos. I found a howto but this howto is for Linux Kerberos and not for MS Kerberos. Does anybody can provide a howto use MS Kerberos for FDS authentication? Thanks in advance seppel
Seppel
2009-Jan-13 18:36 UTC
Re: [Fedora-directory-users] FDS and Kerberos in Windows Domain
Seppel schrieb:> Hi, > > I have installed a fds 1.1 on centos. > > I would like to use the kerberos authentication feature from my MS > ActiveDirectory Domäin. > I am new with kerberos. > I found a howto but this howto is for Linux Kerberos and not for MS > Kerberos. Does anybody can provide a howto use MS Kerberos for FDS > authentication? > > Thanks in advance > seppel > > -- > Fedora-directory-users mailing list > Fedora-directory-users@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users >Did nobody use kerberos authentication with fds? Nobody in MS Kerberos? thanks seppel
Alessandro Orsaria
2009-Jan-14 20:17 UTC
Re: [Fedora-directory-users] FDS and Kerberos in Windows Domain
Hi, To use MS Kerberos for authentication and FDS for authorization, configure your Linux as a Kerberos client (/etc/krb5.conf). Then, in /etc/pam.d/system-auth you should have 3 lines like: auth sufficient pam_krb5.so try_first_pass account [default=bad success=ok user_unknown=ignore] pam_ldap.so account required pam_access.so accessfile=/etc/security/access.conf and map which users/groups should be allowed to access your machines in access.conf. A. 2009/1/13 Seppel <cw-news@gmx.de>:> Seppel schrieb: >> >> Hi, >> >> I have installed a fds 1.1 on centos. >> >> I would like to use the kerberos authentication feature from my MS >> ActiveDirectory Domäin. >> I am new with kerberos. >> I found a howto but this howto is for Linux Kerberos and not for MS >> Kerberos. Does anybody can provide a howto use MS Kerberos for FDS >> authentication? >> >> Thanks in advance >> seppel >> >> -- >> Fedora-directory-users mailing list >> Fedora-directory-users@redhat.com >> https://www.redhat.com/mailman/listinfo/fedora-directory-users >> > Did nobody use kerberos authentication with fds? > > Nobody in MS Kerberos? > > thanks > seppel > > -- > Fedora-directory-users mailing list > Fedora-directory-users@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users >