Hot answers tagged kerberos
On linux you can use kvno command to retreive it from KDC [root@XXXX XXX]# kvno host/XXXX host/XXXX@TEST.COM: kvno = 13
On Windows machines that are part of an Active Directory domain, users receive their Kerberos ticket-granting ticket when they log into Windows, and PuTTY is able to use that for authentication if GSSAPI authentication is enabled in PuTTY Configuration Connection|SSH|Auth|GSSAPI (and other authentication methods that it tries before GSSAPI, such as ...
First off, a clarification. Kerberos and SSH Keys are two mutually exclusive authentication methods for SSH. You don't use Kerberos with SSH Keys. You use Kerberos instead of SSH Keys. Both allow for "passwordless" SSH logon. A bit of reading on the Kerberos protocol may be in order. With Kerberos, you need to obtain a TGT that proves you are who you say ...
Kerberos is meant for authentication, i.e. proving who someone is. It is not intended for authorization, i.e. figuring out what someone should be allowed to do. You'll need to use something else. To paraphrase, the application should say "Yes, I believe you are who you say you are, but you can't access what you're trying to access." For sshd AllowGroups is ...
I recently had the same issue. It turned out to be SPN related. The SPN had been mapped to the machine account of the SQL Server instead of mapped to the service account that was running SQL Server. We deleted and recreated the SPN - mapped to the service account running SQL Server 2012R2 on the host and everything was gravy. #ShoutOutToGabe
Only top voted, non community-wiki answers of a minimum length are eligible