Re: KDC Setup

2007-02-27 Thread Edward Irvine at home
Gayal wrote: > Hi, > > I tried several tutorials to setup my own KDC but no success. > Can anyone tell me a quick how to? The kerberos section from the FreeBSD handbook is as quick a howto as you will get. It is based on Heimdal. Here is the link http://www.freebsd.org/doc/en_US.ISO8859-1/boo

Solaris 10 sshd + GSSAPI - usernames limited to 8 or 9 chars?

2007-02-26 Thread Edward Irvine at home
Hi, We are using the stock solaris 10 sshd daemon and a W2K3 KDC. Everything works fine except for one of our users who has a ten character username. The user with a long username fails to login from a number of clients, such as another solaris 10 computer, and a SecureCRT terminal emulator on w

Re: putty/winscp with gssapi/krb5 ticket forwarding

2007-01-25 Thread Edward Irvine at home
Hi Lars, Lars Schimmer wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Hi! > > After some testing I got a few test PCs with debians "etch" system do > ticket forwarding and obtaining afs tokens. > Now I want to use putty and winscp from windows to login without a > password on that

Re: Help needed on kerberos HOST SERVER and KERBERISED SERVICES

2006-11-15 Thread Edward Irvine at home
Ramesh, Many people don't use klogin, ktelnet, or kftp any more. They just use ssh and sftp. On Linux, I believe you will have to set "GSSAPIAuthentication yes" in /etc/ssh/sshd_config, and "GSSAPIAuthentication yes" in /etc/ssh/ssh_config you will want to read the ssh_config and sshd_con

gssapi solaris 10 howto

2006-11-10 Thread Edward Irvine at home
Folks, I've updated this a little after a co-worker gave it a test drive. But I note I have not received a single comment from this list :) Note that I couldn't get SecureCRT to work without the MIT Kerberos for Windows NetID manager installed (just running in the backround in default mode). I

Re: getting linux to authenticate with windows 2003

2006-11-10 Thread Edward Irvine at home
Hi Bob, Try this: [domain_realm] .cablecar.local = CABLECAR.LOCAL cablecar.local = cablecar.local Eddie Bob Jaques wrote: > I am setting up samba in a windows 2003 environment and am trying to > confirm kerberos authentication. > When I run kinit on my Linux machine I get a me

Re: Incorrect Kerberos Auth Config File?

2006-11-07 Thread Edward Irvine at home
Chris, You might try changing your domian_realm section to look a little more like this: [domain_realm] whatever.com = WHATEVER.COM .whatever.com = WHATEVER.COM Eddie Chris cc wrote: Hi Guru, I just finish setting up a kerberos authentication; however, I seem to have a problem

GSSAPI authentication - Windows AD to Solaris 10

2006-10-30 Thread Edward Irvine at home
Folks, After a bit of expermentation, I put together the following. It is kind of what I wish I had six months ago... Maybe something like this has been done before, but I haven't been able to find it. http://220-245-28-18.static.tpgi.com.au/~irvinee/gssapi-sol10/gssapi-howto.html Still in dra