Any workaround for [domain_realm] section

2008-07-29 Thread Abhishek Chowdhury
I am using kerberos v5 version Following is the domain realm section of my kerberos configuration file [domain_realm] abhi.com = AS.ABHI.COM .abhi.com = AS.ABHI.COM abhi-amit.abhi.com = AMIT.ABHI.COM as.abhi.com = AMIT.ABHI.COM Now in the realm AMIT.ABH

SSH configuration

2008-07-29 Thread Abhishek Chowdhury
I want to configure passwordless ssh after successful kinit. for that I have to change configurations in etc/ssh_config: GSSAPIAuthentication yes GSSAPIDelegateCredentials yes but we dont have these options in ssh_config file? any pointers in this regard? -- View this message in context: ht

Re: Any workaround for [domain_realm] section

2008-07-30 Thread Abhishek Chowdhury
>From where I can get steps to implement the TXT records method if I want to do it. Javier Palacios-2 wrote: > > On Tue, Jul 29, 2008 at 9:49 AM, Abhishek Chowdhury > <[EMAIL PROTECTED]> wrote: >> >> I am using kerberos v5 version >> Following is the

Re: SSH configuration

2008-07-30 Thread Abhishek Chowdhury
> I am getting the initial krtgt ticket and the service ticket also when I > am trying to do ssh. But still the ssh is asking for passowrd. I have done > the configuration required in the ssh and sshd file. > > bodik wrote: > > hi, > > I think, that you also need: > > * krb5.conf > a prop

configure AFP and VNC services for kerberos?

2008-07-31 Thread Abhishek Chowdhury
hi i am using kerberos V5, MAC OSX 10.5.2. i want to configure AFP and VNC services for kerberos. what configuration steps do i need to follow? any pointers in this regard will be really helpful. -- View this message in context: http://www.nabble.com/configure-AFP-and-VNC-services-for-kerbero

Re: SSH configuration

2008-08-04 Thread Abhishek Chowdhury
> I am getting "No Valid Key Exchange Context" > Seb-27 wrote: > > On 2008-07-29, bodik <[EMAIL PROTECTED]> wrote: >> * sshd_config >> KerberosAuthentication yes >> KerberosOrLocalPasswd yes >> KerberosTicketCleanup yes > > that's for Kerberos 4; for version 5 you need: > > GSSAPIAuthen

configure AFP and VNC services for kerberos?

2008-08-04 Thread Abhishek Chowdhury
hi i am using kerberos V5, MAC OSX 10.5.2. i want to configure AFP and VNC services for kerberos. what configuration steps do i need to follow? any pointers in this regard will be really helpful. -- View this message in context: http://www.nabble.com/configure-AFP-and-VNC-services-for-kerbe

Cross Realm Not working for SSH

2008-08-07 Thread Abhishek Chowdhury
hi i am using kerberos V5 and MAC OS X 10.5.2 i have configured 2 realms and established cross realm trust between them. i have to use SSH service. When i am doing SSH in simple authentication, it is working fine ie not asking any password. but password is being asked for Cross realm. suppose

NFS configuration

2008-08-19 Thread Abhishek Chowdhury
hi , I want to configure NFS for kerberos.But before setting up for kerberos I want to configure simple NFS. On the server machine I created the file /etc/exports with entry /etc/NFSClient 10.95.77.62(ro) then verified rpcinfo -p 10.95.77.57 it shows program vers proto port 102 tcp

Configuring client for NFS

2008-08-20 Thread Abhishek Chowdhury
I want to set up NFS for kerberos authentication. I have created all the required principals and keytabs correctly and made an entry in etc/exports as /mount 17.224.21.59 -sec=krb5 -ro Now on client side after successful kinit i get the initial krbtgt ticket . after that when i am trying to run

Re: Configuring client for NFS

2008-08-21 Thread Abhishek Chowdhury
> when i am trying mount -t nfs4 -o sec=krb5 17.201.112.127:/mount > /home/mount > i am getting /home/mount no such directory > earlier the error was authentication error when i am not writin -t nfs4 > > my exports look like > /home/mount/ 17.224.114.139 -sec=krb5 -ro > > nothing extra then

Re: Configuring client for NFS

2008-08-21 Thread Abhishek Chowdhury
> According to the guide > https://help.ubuntu.com/community/NFSv4Howto#Create%20and%20distribute%20credentials > I have to create /etc/default/nfs-kernel-server > and /etc/default/nfs-common on the server and /etc/default/nfs-common in > the client. > But these files are not available on my m

AFP not working for cross realm

2008-09-08 Thread Abhishek Chowdhury
I have configured AFP for kerberized authentication. It is working fine with simple kerberos authentication,but with cross ream i am not able to mount using the command mount_afp afp://[EMAIL PROTECTED]/test1 /test2 i am getting all the cross realm ticktes and the service ticktes and I have ver