Re: Getting user info via LDAP, authenticating via Kerberos

2009-03-26 Thread Javier Palacios
On Thu, Mar 26, 2009 at 6:48 PM, John Koelndorfer wrote: > So, here's a quick example in case I wasn't clear enough: > I ssh to our server using my domain credentials, kdorf and password. > > If I have a local user account on that machine and ldap is *not* listed > in nsswitch.conf, I can login us

Getting user info via LDAP, authenticating via Kerberos

2009-03-26 Thread John Koelndorfer
Hello everyone, I've got a tricky problem that's been gnawing at me for the past few days or so. First, a little background: We're running an active directory setup with the usual Windows domain controllers (they're Windows 2000, if it matters) but users' home directories are stored on a Linux

Question on renewable lifetime

2009-03-26 Thread miguel . sanders
Hi I'm having a background process which requires a service principal to work correctly. Currently, I'm having a cron job which does a kinit (with the keytab supplied) for that service principal. Wouldn't it be better to renew the ticket instead of doing the above? As a result, I would have to set

Re: clustered NFS - kerberos - mount failure

2009-03-26 Thread Kevin Coffman
Hi, You don't say what OS you're dealing with here. Different OS's have different gssd implementations which have a bearing on the issue. If Linux is involved, you'll get more help mailing the linux-nfs mailing list (linux-nfs.vger.kernel.org). If the server is Linux, a patch has been submitted t

clustered NFS - kerberos - mount failure

2009-03-26 Thread Chinmay P Soman
Hi, I am trying to configure a NFS server with kerberos support. The catch is, the NFS server is part of a cluster. Therefore, all the client mounts are done using the cluster name and not the server name. For eg:Let cluster name = Mycluster.domain.com , server = server1.domain.co