Questions tagged [kinit]
The kinit tag has no usage guidance.
18
questions
0
votes
1
answer
825
views
Refresh kerberos ticket instead of prompting for pam password
Using centralised auth against FreeIPA is working great. In order to use Kerberos SSO when using ssh, scp etc from jumphosts users must initiate their Kerberos tickets first with kinit. I've added ...
- 13
0
votes
0
answers
637
views
When is mapUser required -
I'm not sure I understand when & why mapUser is needed.
When you generate a keytab with ktpass you can map the Service Principal to a user wit mapUser. You can then kinit to the Service from an ...
0
votes
1
answer
607
views
kinit Password Expire Warning
I've a Ubuntu desktop client joined to an Active Directory 2008 R2 domain.
I need to use "kinit" command on Linux to determine when a user password will expire. That's my way to go due to ...
- 101
4
votes
0
answers
8k
views
kinit to get TGT returns “KrbException: Identifier doesn't match expected value (906)” under Windows Server 2016 Active Directory + Kerberos + JDK8
Trying to make Windows Server 2016 Active Directory + Kerberos and Java OpenJDK 8 kinit to obtain a ticket-granting ticket returns KrbException: Identifier doesn't match expected value (906)
I have ...
3
votes
0
answers
2k
views
How to run kinit as root before automounting mutiuser cifs mounts?
Goal
I'm setting up multi-user CIFS mounts in an Active Directory environment under CentOS 8.2. The storage server supports SMB3.1.1 protocol.
Prerequisites
I could easily integrate the system to the ...
1
vote
1
answer
3k
views
Microsoft Active Directory kerberos returns unknown principal
I m trying to authenticate the host for kbr5p nfs mount where Microsoft active directory is acting as the Kerberos server.
sudo kinit -k -t /etc/krb5.keytab host/[email protected]
kinit: ...
- 241
0
votes
1
answer
3k
views
RHEL: Getting current kerberos/Kinit user ID after login?
I am connecting by SSH to a RHEL6 server.
When I SSH into the box, I am challenged for my linux username/password (which is a shared account)
username: mySharedLinuxUser
pass for mySharedLinuxUser:...
- 173
1
vote
1
answer
3k
views
Windows kinit kerberos connection fails with ICMP Port Unreachable
I'm trying to connect to a kerberos server with a keytab:
kinit -k -t securitytest.keytab [email protected]
Exception: ICMP Port Unreachable
java.net.PortUnreachableException: ICMP Port ...
- 183
0
votes
1
answer
691
views
Linux ksu (kerberized super user) command fails to use cached service (host) tickets
Questions at the end
About my environment
I have tried in two different environments: (i) Linux Ubuntu 16.04LTS server enrolled in Active Directory (Microsoft) Domain and (ii) Linux Ubuntu 16.04LTS ...
- 171
1
vote
1
answer
3k
views
How can I setup automatic renewal for Kerberos tickets and make the ticket life longer, in an OSX Server mail server
I have to renew tickets manually in my server terminal for users to have access to their mail accounts. I am using kerberos as a login authentication to access a local mail server. My local machine ...
- 412
0
votes
2
answers
1k
views
Restricting Kerberos Credential Cache to session
Currently we are using a very bad access model to our servers.
Every person logs in via ssh to the same unix user. We have several keytabs which are used by everyone and normally the same keytab is ...
- 21
2
votes
1
answer
25k
views
kinit pre-authentication fails
I have a CentOS 6.4 that someone set up a while back.
The admin is not sure how he installed it, but it works very well with Kerberos.
I used authconfig to set the domain and the Kerberos settings.
...
- 21
3
votes
2
answers
18k
views
How to clear kerberos config
I am setting my machine as a kerberos client. I have a question on how the kerberos config file actually take effect and how to clear its effect. My experiment is as follow.
Step 1, without editing ...
- 245
3
votes
0
answers
1k
views
kinit error: Realm not local to KDC, DC is in a subdomain
I have a user: [email protected] as principal and the next krb5.conf:
[libdefaults]
default_realm = EXEMPLE.COM
default_tkt_enctypes = arcfour-hmac-md5
default_tgs_enctypes = arcfour-...
- 131
1
vote
0
answers
2k
views
Mysterious kinit-failure on Debian Jessie
I have a machine with the Samba 4 AD and the second as a client. After two days of good operation, suddenly the kinit stopped working on the client-side. The reason is quite mysterious. It cannot ...
1
vote
0
answers
996
views
Kerberos Service Principal not found in AD
I've got a strange problem with an Active Directory SPN Account.
This does not work:
kinit HTTP/[email protected]
However, "setspn -l SA_MyUser" lists "HTTP/my.host.com" as registered service ...
- 309
18
votes
9
answers
192k
views
Kinit Won't Connect to a Domain Server : Realm not local to KDC while getting initial credentials
I am setting up a testbed environment where Linux (Ubuntu 10.04) clients will authenticate to a Windows Server 2008 R2 Domain Server.
I am following the official Ubuntu guide to set up a Kerberos ...
- 911
1
vote
1
answer
452
views
Booting Debian5 (Lenny) on 2.6.16 Kernel
Due to a proprietary kernel module that I don't have the source to and is very picky about what kernel versions it will load into (even with modprobe --f), I find myself in need of running a 2.6.16.XX ...
- 768