search for: kerberized

I have a kerberized SSHD installed on HOST-1, a login server for the outside world. How can I make it so users are still authenticated via kerberos, even though they haven't yet received a ticket? The main reason for this is that a user who is at home, no vpn, but has an ssh client could then login and be authen...

Hi, I've been working on some systems trying to get kerberized nfsv4 and kerberized web services going on 7. Kerberized nfsv4 was working with 7.0, but with the 7.1 release it stopped working, the key difference between the two setups is that gssproxy wasn't being used with 7.0, but seems to be key with 7.1. The problem I am encountering with Kerberized...

Hello, Is it possible to use Dovecot in a fully kerberized mail system? We have configured authentication via kerberos, now we would like the imap deamon to access a kerberized nfs file system. Has any one any experiences? Regards, Matthew. -- Dr Matthew Williams MEng PhD MBCS Systems Administrator - IT Services - Bangor University Prifysgol Bang...

Is anyone on the list using kerberized-nfs on any kind of scale? I've been fighting with this for years. In general, when we have issues with this system, they are random and/or not repeatable. I've had very little luck with community support. I hope I don't offend by saying that! Rather, my belief is that these problem...

Hi all, I failed to map my network drive my,password is not accepted from windows XP using Kerberized Samba3.0. My server is Red Hat Enterprise Linux. Can some one help with the basic steps in mapping network drive from Windows XP? Or basic configuration with Kerberos 5. I am new to Kerberos 5. Zakaria __________________________________ Do you Yahoo!? Yahoo! Finance Tax Center - File online....

Matt Garman wrote: > Is anyone on the list using kerberized-nfs on any kind of scale? > We use it here. I don't think I'm an expert - my manager is - but let me think about your issues. <snip> > Just to give a little insight into our issues: we have an > in-house-developed compute job dispatching system. Say a user has > 100s of a...

...tallations are clueful. > > And this all goes without mentioning that people are re-enabling telnet > on their APC powerstrips right in this second because OpenSSH won't work > any more. There is a simple solution: Hardware certified per MIL standards (US DOD MIL standards) support kerberized telnet, so ssh can be declared as "not needed" / "obsolete" for that purpose. Ced -- Cedric Blancher <cedric.blancher at gmail.com> [https://plus.google.com/u/0/+CedricBlancher/] Institute Pasteur

...king correctly, or to at least verify it's working per a specification. With that, I'm interested in what books/docs/etc does anyone recommend to get a good understanding of: 1. Kerberos implementations in general 2. Kerberizing SSH to work in that type of environment 3. Utilizing SSH in a kerberized environment ANY help on this is much appreciated. -- Austin Gonyou Systems Architect, CCNA Coremetrics, Inc. Phone: 512-796-9023 email: austin at coremetrics.com

...the configure and I found I needed to add -lutil to the link of login.krb5 in src/appl/bsd. After that everything seemed to work (against an AD KDC). I tried kinit, klist and telnet -a. It seemed to create the file in /tmp with appropriate NTFS security restrictions. Next I successfully compiled kerberized ssh. Now I can ssh without mucking with ssh keys everywhere. It would also be nice if openssh had an option for only compiling client stuff. Now I only need to integrate ms2mit and I'll be in SSO heaven [naturally ms2mit doesn't put the mit tgt in the right place for cygwin] I suspect...

On 03/22/2017 03:26 PM, Matt Garman wrote: > Is anyone on the list using kerberized-nfs on any kind of scale? Not for a good many years. Are you using v3 or v4 NFS? Also, you can probably stuff the rpc.gss* and idmapd services into verbose mode, which may give you a better ideas as to whats going on. And yes, the kernel does some kerberos caching. I think 10 to 15 minutes.

Am 2016-11-28 07:14, schrieb Matthias Kahle via samba: > Hi Folks Hi Matthias, > I'm trying to share user home directories hosted on a Samba-4 member > server via NFSv4. Everything's working well with the Windows shares but > when it comes to kerberized NFSv4 it fails. I can't even mount the > home > root directory via nfs on the server itself ("mount.nfsv4: access > denied > by server while mounting ..."). > > As far as I have tracked it down, it appears to me that the server's is > searching in its data...

Sigh. Is anyone here working getting K5 kerberized ssh onto Mac OS X? I'm having trouble building with the Apple krb5 and OS X include files - seems fp.h gets sucked in by something, and it's got it's own idea of what "log()" is... Is there a better place to ask this question? Be gentle, please. Thanks. --paw Pat Wilson...

Is anyone currently using CentOS 5.5 with 2008 R2 AD authentication and a fully Kerberized NFSv4? If so would you mind sharing your configuration with me? I have been able to successfully get it working with Windows 2003 as discussed earlier on the list http://lists.centos.org/pipermail/centos/2010-July/096374.html With the exception that I had to use dynamic UIDs on the machine si...

Hello, thanks for the time to read this. I am doing a proof of concept in the following context. I have a NT 4.0 domain and because I don't want AD, I am moving towards a MIT Kerberos managed domain which still gives me SSO and thru kerberized SAMBA, file sharing. What I have setup so far is XP workstations SSO into the MIT Kerberos domain, I can access shares on the Samba server without being prompted for username / password and I can also mount shares from the NT domain into my Samba server who then shares it with my MIT domain cli...

Hi, I'm currently attempting to setup a Linux Samba and Kerberized NFS server using a Windows 2008 R2 Domain controller as a KDC and I've run into an issue. Currently I can make Kerberized NFS or Samba fileserving work but not both at the same time. Specifically: The Linux kerberized NFS daemon (rpc.svcgssd) appears to only be able to deal with service ticke...

...ts.samba.org wrote on 20/02/2014 10:46:38: > De : Georg Hopp <georg at steffers.org> > A : Sumit Bose <sbose at redhat.com>, > Cc : samba-technical at lists.samba.org > Date : 20/02/2014 10:47 > Objet : Re: samba4 success/failure report...all's working despite > kerberized ssh > Envoy? par : samba-technical-bounces at lists.samba.org > > On Wed, Feb 19, 2014 at 12:09:32PM +0000, Georg Hopp wrote: > > On Wed, Feb 19, 2014 at 11:50:59AM +0100, Sumit Bose wrote: > > > > > > This looks all good, the additional output after kdestroy is d...

...ollowed by the user's credentials that are checked upon directory/file access. In case you haven't found it yet: There's a nice tool called msktutil, that will help when creating user/ servicePrincipalNames in Active Directory / Samba DC. One other thing I found during my tries to get kerberized NFSv4 working with my Samba DC: Some principals require the NO_AUTH_DATA_REQUIRED flag to be set (--no-pac in msktutil), otherwise tickets will not be accepted (not all of the principals require this and I'm not sure wether it was the client or the server who needed this...). Motivated by your...

Hi all, again, I'm not knowledgeable about Kerberos, but we have a few users who use it to make sure that it works well on Solaris... so, they would like a Kerberized IMAPd. I tried compiling dovecot --with-gssapi on Solaris Nevada (the current development release), and the configure script choked for a couple of reasons. First, script uses 'grep -qv' in the case that you specify --with-gssapi to run some test. Unfortunately, Solaris doesn't have...

Hi, I'm stuck since one week on how to give access on a kerberized nfs4 share to client-side local account (more precisely www-data account)... My client setup and step-by-step configuration : - Installed OS : XUbuntu 16.04 x64 1. Installing Samba4 from repos 2. Configuring Samba : My client-side smb.conf : [global] netbios name = TEMPOINST workgr...

Erik Laxdal wrote: > Hi, > > I've been working on some systems trying to get kerberized nfsv4 and > kerberized web services going on 7. Kerberized nfsv4 was working with > 7.0, but with the 7.1 release it stopped working, the key difference > between the two setups is that gssproxy wasn't being used with 7.0, but > seems to be key with 7.1. > > The problem I am...