Displaying 1 result from an estimated 1 matches for "gssapidelegationcredentials".
2014 May 25
2
Samba 4 / Kerberos / ssh
...b
alice
i have done the following. I want to connect from bob to alice with the service accounts
I added to the following to both of the dcs
sshd_config
GSSAPIAuthentication yes
GSSAPICleanupCredentials yes
GSSAPIStrictAcceptorCheck yes
GSSAPIKeyExchange yes
ssh_config
GSSAPIAuthentication yes
GSSAPIDelegationCredentials yes
GSSAPIKeyExchange yes
GSSAPITrustDNS yes
After that i created the keytab i know i need an working ticket
Samba-tool domain exportkeytab /etc/krb5.keytab -principal=alice$
I get the ticket with on bob for alice
kinit -v -k -t /etc/krb5.keytab alice$
after that i tryed to get an ssh connecti...