Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Very few texts talk about

a unix key server a client windows (lets say XP) to authenticate.

The texts that I have read will mention this topic but more or less skip the details. When setting up/compiling/building/etc a unix (say freebsd) key server, what are the "musts"

a couple of words have been thrown down with the type of authentication/encryption needed but never enough detail.

I haven't been able to find a a good resource for this or posts in mailing lists


share|improve this question

Microsoft has written step-by-step descriptions on how to integrate a Windows 2000 AD with a Kerberos realm.

share|improve this answer
I have found lots of text describing how to have a *nix client authenticate against AD. However I want to have a *nix server be the authentication service. Clients may be windows but all my services run on *nix machines (usually free/openbsd and linux) – rev Jul 16 '09 at 11:59
I will clarify a little more. I have a couple of XP workstations, is it known if the step by step would work on XP Home (or possible Pro). – rev Jul 16 '09 at 12:05
What would you like this procedure to do? Work at the Windows login? Or work with a separate program after you have logged in locally? – Martin v. Löwis Jul 16 '09 at 18:29
I would like to have the windows login process authenticate against my Kerberos service. – rev Jul 21 '09 at 16:31
For that, I don't think a Kerberos service is sufficient. You need a full Active Directory, and you need the computer to be member of the Active Directory domain. Supposedly, Samba 4 will provide that functionality some day, but it may not work today. – Martin v. Löwis Jul 21 '09 at 21:05

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.