search for: kerboros

My mamnager's trying to get nfs v4 working with kerboros. One major issue is that we do *not* have access to the server, or ktadmin - that's the network folks, and they have AD on the other side. The result is that he can't create (if I have this right) objects. I found <http://sadiquepp.blogspot.com/2009/02/how-to-configure-nfsv4-with-kerber...

I'm trying to install an custom application the install is fine. After that I got a valid kerberos ticket. If I connect via SQLNet on the DB with the kerberos ticket it will works fine. If I start my custom windows application I can't login automatic but i got the login mask. It seems the kerberos authentication doesn't work and I got the following messages on log On a previous wine

I would like to be able to use Windows Active Directory accounts for logon to a Linux RH8 desktop. I have successfully used Kerberos to add the desktop to the AD domain. I am also able to use Kerberos or rpc to view users & groups. I have not been able to use winbind. I am using the Samba3.aplha22 RPM. Our AD domain has restrict anonymous set to 1 for the DC's. Following the How-To

...ntication. But we have 2 Active Directory forests. AD2 is trusted by AD1 and all the Linux hosts will be part of AD1. The idea is to have a AD1 resource and AD2 users. So we will need Linux Hosts to authenticate users of both AD1 and AD2. I am not sure about how to map uid/gid and also weather kerboros will be able to authenticate both Domains. If you guys can throw some ideas on how to achieve this, that will be great. Cheers, LA

I'm horribly new at this. I just went through the process of setting up CentOS to use PAM + Kerboros for authenticating users to an Active Directory domain. I ended up having to read a lot of out of date or related howtos to get what I need. I documented the process I used and just got done re-doing it on a fresh VM install to make sure I covered everything. I figured rather than keeping...

...From the Help from Microsoft: After adding the delegation between hosts Hyper-V, the following should occur. The configuration changes do not take effect until the following has occurred: The changes have replicated to the domain controllers that the servers running Hyper-V are logged into. A new kerboros ticket has been issued. What could be the problem?" can anyone help me? I will answer any questions.

I've upgraded to 15.2, which has a webui. However, I'd like to tell it to use kerboros, not a hard-coded password in a configuration file. Any clues? mark

...From the Help from Microsoft: After adding the delegation between hosts Hyper-V, the following should occur. The configuration changes do not take effect until the following has occurred: The changes have replicated to the domain controllers that the servers running Hyper-V are logged into. A new kerboros ticket has been issued. What could be the problem?

...nes in and other people are getting root access, so there is nothing stopping someone from logging in as root on their machine, typing "su - fred" and having access to all of the files in fred's home directory. So we're looking at ways to stop this from happening. NFSv4 with kerboros authentication sounds good, but its still in development. Some people have said they have done it with iptables, NAT, redirection and other things, but details are sketchy at best and it appears to be really complicated. I've been looking at smbfs to try and solve it. I've got a serv...

...run, would be considerations -- though for prototyping, whatever is easiest/fastest to put in place that does the job. So sounds like kinit (I'm not a Kerb-familiar person) is a kerb thing so it probably uses a standard port. Grepping through my '/etc/services I see several ports for Kerboros usage -- perhaps kinit or a kerb manual documents what is needed? Either that, or look at what ports are 'owned' by your krb servers -- use netstat as root with "-p" and for each open port it will show you what prog is using it -- so you can come up with a list for ports that t...

...investigating,> > I discovered that the clock on the affected machine was off by more than> > the> > allowed Kerberos skew limit. I solved it by synchorizing the clock on the> > affected workstation.> >> > In my environment we are using AD authentication and the Kerboros> > mechanism> > wants the clocks to be reasonably synchronized. I am unsure why the> > authentication will work with an ip address and not the Netbios name.> >> > Thanks> > Jay> >> > "Aders andersson" <cpsamba@hotmail.com> wrote in mes...

...gt; by the config script. There is a line that says > > ac_help="$ac_help > --with-kerberos4=PATH Enable Kerberos 4 support" > > I assume this means add the flag > > --with-kerberos4=PATH > > to ./configure. > > However, I have the KTH version of KERBOROS, which has files in > idiosyncatic places. All the stuff is in /usr/athena, with subdirectories > like lib and include. krb.h is in /usr/athena/include, but the script > complains it cannot find it when I set PATH=/usr/athena. I get the > following output from configure which seems rele...

...oups). Decided to reload from scratch to clean up and load newest versions(and to understand more) I now have the following: W2K ADServer = W2KADS.OURORG.OURDOMAIN.ORG Slackware/Samba server = OURSAMBASERVER HP570ML G3 w/Compaq Smart array 640 Slackware 10.1 2.4.29 kernel Loaded the following: Kerboros krb5-1.4 OpenLDAP openldap-2.2.23(Loaded for libraries) Samba 3.0.11 (patched for clitar error) copied /usr/local/samba-3.0.10/source/nsswitch/libnss_winbind.so /lib Added entrys in /etc/hosts and in W2KADS %Systemroot%\System32\drivers\etc\hosts Don't know if I need to but: added root and ad...

I hope this is the right place to post this. I am running SuSe 8.2 Linux on an IBM 1 gig processor at work. I installed samba 3.0.5 on it and followed the instructions in the online book "Samba-3 by Example" for chapter 9 "Active Directory Domain with Samba Domain Member Server <http://www.samba.org/samba/docs/man/Samba-Guide/unixclients.html#adssdm>" to the tee (of

...OURNAMESERVER2 nameserver OURNAMESERVER3 nameserver OURNAMESERVER4 nameserver (our W2KADS IP) _____________________________________________________ # date (MMDDHHMM) same time as W2KADS (syncs OURSAMBALINUX time to W2KADS server) _____________________________________________________ Kerboros krb5-1.4 #./configure #make # more /etc/krb5.conf [libdefaults] default_realm = OURORG.OURDOMAIN.ORG [realms] OURORG.OURDOMAIN.ORG = { kdc = W2KADS.OURORG.OURDOMAIN.ORG:88 admin_server = W2KADS.OURORG.OURDOMAIN.ORG:749 def...

Hi All ! i?m running Clearcase (IBM Rational) and have some strange problems ... when i use Samba ver 3.21b i can?t access the samba share by name (\\servername\sambashare) but i can access it on ip (\\192.168.1.100\sambashare\) i?m running debug level 10 and it seems like it can?t authenticate when access on netbios/dns/host name but on ip it can ? when running samba ver 3.23b from

Hi, I?m having much trouble on configuring Samba to work on an Active Directory environment. Using getent password I?m able to see AD?s users. wbinfo -u and wbinfo -g also work fine. When someone from a Windows try to access my Samba server, the smd password window is shown (I think that the autehntication would be transparent, wouldn't it ?), any password I provide is rejected: I tried AD