On 9/4/07, Roman S <[EMAIL PROTECTED]> wrote:
>
> Hey guys!
>
> I've configured a Microsoft Active Directory with LDAP and Kerberos, and some 
> Linux (Redhat) clients who authenticate to it.
> I'm able to get some tickets for the users who are in the Active Directory, 
> but SSH behaves a bit strange.
>
> I can always ssh to the same machine again.
> Like
> #foo: ssh foo
>
> but I can't ssh to any other computers. I always get a Permission denied.
> I've only enabled gssapi authentication, all others are disabled.
> Debug output of ssh didn't get me any further.

Hi Roman,

Did you create the host principal and keytab for the target server?

Also, you'll need a .k5login file in the home directory of the target:

  $ cat ~/.k5login
  [EMAIL PROTECTED]

Google for info about the above and you should find a tutorial I would think.

Mike

> At the moment users are basicly managed over NIS, only a few test users are 
> in LDAP, so they don't have home directories. I don't know if this could 
> cause the trouble.
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to