2
votes
1answer
32 views

Kerberos-PAM authentication failure: pam or pre-authentication

kinit -p 'username' works -- no problem with the setup of the Kerberos realm. I can't get the login from the GUI to work, however. Client auth.log: pam_krb5(gdm3:auth): user <username> ...
3
votes
0answers
124 views

Kerberos, .k5login and sudo

Background: I am using a Debian 7 system which I have integrated with an LDAP+Kerberos system using libnss-ldap, libpam-krb5 and nscd. I have modified sudoers to permit an LDAP group the right to sudo ...
1
vote
0answers
26 views

Kerberos credentials cache dates reported differently in Debian Squeeze and Debian Wheezy

I have two Debian servers which use same LDAP/Kerberos server, but dates in output of klist on them shown in different format - mm/dd/yyyy on squeeze vs dd/mm/yy on wheezy. Looks like they just use ...
0
votes
1answer
44 views

AFS client error message “tokens have expired”

I see the following syslog entries about once or twice a day on one of my servers. This server backs up files to AFS space using a Kerberos service principal: Dec 6 04:01:06 myserver kernel: ...
0
votes
1answer
656 views

Mounting samba share authenticated by kerberos automatically through /etc/fstab

I have a samba server working and I can access the different shares with the command smbclient -k //$server.$my_domain.$net/$my_share I would like the mount to be automatically provided at boot ...
1
vote
2answers
1k views

Using Apache / Kerberos / Keytab to Authenticate Redmine Users Against Active Directory

Please bare with me, as I am still fresh to these technologies. We have a Debian (squeeze) server to which I have root access. It is running Apache, and Redmine is deployed to the server (currently ...
4
votes
2answers
3k views

Setting up a Mac Mountain Lion NFS client to securely access Debian NFS server

Okay, I’m going just about insane here. Trying to set up an OS X (10.8.2) NFS client to connect to Debian (6.0.6) nfs server. I’ve mostly been following instructions here: ...
0
votes
1answer
346 views

kadmin.local -q “addprinc” adds REALM unnecessarily

When I run the command kadmin.local -q "addprinc admin/admin" it adds the realm to the end of user. So admin/admin becomes admin/admin@LBOX.COM This is what I ran. Any suggestions would be awesome. ...
2
votes
2answers
4k views

debian: cannot change password

As the root user, I can change the password: hussie:/home/claudiu# passwd Enter new password: Retype new password: passwd: password updated successfully As a non-root user I cannot: ...
0
votes
1answer
628 views

Kerberos Password Change Web Interface Suggestions

Debian 6 MIT Kerberos i.e. krb5 We can change our Kerberos passwords by using kpasswd at the command line. We'd like to offer users the option to change their Kerberos passwords in a friendly web ...
0
votes
1answer
448 views

How to grant a kerberos ticket after successful imap authentication from dovecot

An interesting question, I hope. I am running a set of virtual machines under debian 6, to build a mail/collaboration server. I am mainly using dovecot, postfix, openldap and heimdal. Mails are ...
2
votes
1answer
2k views

Disable Kerberos password

When trying to add a new user on a Debian 6.0 box I get: passwd: User not known to the underlying authentication module How can I disable Kerberos authentication and use the good old UNIX password? ...
0
votes
2answers
2k views

How to enable AD authentication with Kerberos on Linux (Debian)?

I want local users to be able to log in to a Linux server using their Windows domain (AD) passwords. (All local accounts have a matching userid in AD). I've installed libpam-krb5, and the main ...