Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I setup Kerberos and LDAP for directory management at an institution for Ubuntu OS. I got LDAP configured correctly and Kerberos. The user's home directory is in an LDAP directory. When the user logs in, the process of authentication grants the user access to the computer. But they don't get write permission to the LDAP partition, which leads to the Desktop Environment (DE) being useless. From the command line, typing klog and providing the password fixes the problem, but from the DE, there is never a change to open a terminal to type klog. Of course, the expected behavior is for klog to be called during login so the user gets straight access to their LDAP directory.

Am I missing a package ? or should I just add klog somewhere in the login process ? (if so, where ? )

share|improve this question

migrated from Nov 28 '11 at 18:05

This question came from our site for professional and enthusiast programmers.

Do you have pam-krb5 set up to allow logins? If so, once a user is authenticated, they should have a Kerberos TGT; if you set up the LDAP server properly, that TGT should be enough for them to perform an authenticated bind.

If it's not the case that the users are getting TGTs automatically when they login, investigate pam-krb5 to get that part working.

share|improve this answer

The problem was I was using the configuration documentation from a CentOS document where the file /etc/libnss-ldap.conf in CentOS is named /etc/ldap.conf in Ubuntu.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.