Kerberos training

2010-03-17 Thread Bjoern Tore Sund
Does anyone know of anyone doing Kerberos (MIT/Heimdal) training for sysadmins in Northern Europe? Something along the lines of: - Technical details, how the technology works - Practical implementation on: - Linux servers and clients - Solaris servers - Interaction with Windows/AD Rega

Re: Linux kerberos authentication ; gdm

2009-07-06 Thread Bjoern Tore Sund
Nicolas Michel wrote: > Hi here, > > I want to authenticate some linux computers (ubuntu) on a kerberos > server, linked to an ldap one. I see how to do that with pam. > But I have two questions : > - is there an "offline" mode? (if I have no access to the internet I > want to have access to my se

Re: cross-realm authentication problem

2009-05-29 Thread Bjoern Tore Sund
Douglas E. Engert wrote: > > > Bjoern Tore Sund wrote: >> I am trying to get cross-realm authentication to work between AD and >> our MIT Kerberos realm. Windows client are in KLIENT.UIB.NO, Windows >> user accounts are in UIB.NO, Unix/Linux machines and accounts ar

cross-realm authentication problem

2009-05-28 Thread Bjoern Tore Sund
I am trying to get cross-realm authentication to work between AD and our MIT Kerberos realm. Windows client are in KLIENT.UIB.NO, Windows user accounts are in UIB.NO, Unix/Linux machines and accounts are in UNIX.UIB.NO. User names in UIB.NO and UNIX.UIB.NO are the same. KLIENT.UIB.NO and UIB

Re: UDP/TCP problem in cross-realm authentication

2009-05-22 Thread Bjoern Tore Sund
: kerberos-boun...@mit.edu [mailto:kerberos-boun...@mit.edu] Namens Bjoern > Tore Sund > Verzonden: vrijdag 22 mei 2009 11:05 > Aan: kerberos@mit.edu > Onderwerp: UDP/TCP problem in cross-realm authentication > > > We have linux clients in an MIT Kerberos realm (1.6.3), Windo

UDP/TCP problem in cross-realm authentication

2009-05-22 Thread Bjoern Tore Sund
We have linux clients in an MIT Kerberos realm (1.6.3), Windows XP SP3 clients in AD and two-way trust configured. Accessing AD resources from Linux clients work perfectly. Accessing resources in the MIT Kerberos realm from Windows fails more often than not. Lots of packet sniffing shows fr

Re: SSH with auth_to_local on common account

2007-01-04 Thread Bjoern Tore Sund
The solution is to have nscd running. At least that solved the issue for me. -BT Edward Murrell wrote: > In the interests of helping people with the same problem in the > future... I thought I'd post where I'm up to with this. > > So, pam_krb5 isn't sufficient to do this job. It would appear