Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I would like to set up a Kerberos server to authenticate users on our various Linux servers. However, the network that the Kerberos server will be on already has a Windows 2k3 domain controller on it. Is there any way that this Kerberos server can interfere with the DC? We do not wish to have the Linux machines authenticate to the DC because of security concerns.

I have set the realm to be different from the Windows domain. However, the DNS domains are the same for both. Is that all that is necessary for the two to play nice?

share|improve this question

3 Answers 3

up vote 1 down vote accepted

The only time it should even come close to mattering is if both AD and the linux servers share the same DNS domain. In that case, the /etc/krb config files require you to specify which KDC to talk to. In that case, don't point it at the AD servers and instead point it at the KDC you set up for your linux servers.

However, you've set the realm different than the AD servers so even this shouldn't be an issue. You're fine!

share|improve this answer
    
Well, this brings up another point. The two are using the same DNS domain (xyz.com). The AD uses xyz.com as the Domain. I've set up the kerberos to use XYZ.LOCAL for the realm. Can this cause problems? –  Swoogan Jun 26 '09 at 17:27
    
So long as the realms are different (in AD realm=DNS) you're fine. –  sysadmin1138 Jun 26 '09 at 17:29

AFAIK, there's no broadcast-based name resolution or other silliness in Kerberos that should cause any "interference". So long as you're using a different realm for the Linux machines all should be good.

share|improve this answer

u can try using open source www.likewise.com for AD and LDAP all passwd.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.