Re: help with Active Directory Kerberos authentication

2006-10-17 Thread Rohit Kumar Mehta
Scott Ruckh wrote: Here are some other places where I have discussed this topic: http://www.linuxquestions.org/questions/showthread.php?t=371848page=2 http://www.winlinanswers.com/community/viewtopic.php?t=37

Re: help with Active Directory Kerberos authentication

2006-10-11 Thread Rohit Kumar Mehta
hostname returns nfsv4etch pinging nfsv4etch pings 192.168.1.137. I am using VMWARE and NAT, but am no longer using 127.0.0.1 Christopher D. Clausen wrote: Russ Allbery [EMAIL PROTECTED] wrote: Rohit Kumar Mehta [EMAIL PROTECTED] writes: debug1: Miscellaneous failure No principal in keytab

Re: help with Active Directory Kerberos authentication

2006-10-10 Thread Rohit Kumar Mehta
Russ Allbery wrote: You aren't seeing host tickets. So it looks to me like the problem is that you can't obtain host/[EMAIL PROTECTED] tickets from AD. You should be able to test this directly by running: kinit -S host/nfsv4etch.engr.uconn.edu [EMAIL PROTECTED] to obtain host

Re: help with Active Directory Kerberos authentication

2006-10-10 Thread Russ Allbery
Rohit Kumar Mehta [EMAIL PROTECTED] writes: I tried that command and it seems to work: nfsv4etch:~# kinit -S host/nfsv4etch.engr.uconn.edu [EMAIL PROTECTED] Password for [EMAIL PROTECTED]: nfsv4etch:~# klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: [EMAIL PROTECTED] Valid

Re: help with Active Directory Kerberos authentication

2006-10-10 Thread Rohit Kumar Mehta
Thanks Russ, I think you might have found something. I did the command you suggested ssh -ddd 2/tmp/err.txt and found an interesting message in the long file it created. debug1: Miscellaneous failure No principal in keytab matches desired name. My krb5.keytab looks like this:

Re: help with Active Directory Kerberos authentication

2006-10-10 Thread Russ Allbery
Rohit Kumar Mehta [EMAIL PROTECTED] writes: Thanks Russ, I think you might have found something. I did the command you suggested ssh -ddd 2/tmp/err.txt and found an interesting message in the long file it created. debug1: Miscellaneous failure No principal in keytab matches

Re: help with Active Directory Kerberos authentication

2006-10-10 Thread Christopher D. Clausen
Russ Allbery [EMAIL PROTECTED] wrote: Rohit Kumar Mehta [EMAIL PROTECTED] writes: debug1: Miscellaneous failure No principal in keytab matches desired name. My krb5.keytab looks like this: nfsv4etch:~# ktutil ktutil: rkt /etc/krb5.keytab ktutil: l slot KVNO Principal

help with Active Directory Kerberos authentication

2006-10-06 Thread Rohit Kumar Mehta
Hi guys, I am still having trouble with some authentication issues using the AD kerberos server. I can ssh to my Debian/Etch machine using Active Directory credentials, but I cannot login with a Kerberos ticket. kinit works and klist shows the following: nfsv4etch:~# kinit rohitm Password

Re: help with Active Directory Kerberos authentication

2006-10-06 Thread Russ Allbery
Rohit Kumar Mehta [EMAIL PROTECTED] writes: Kerberized telnet does not seem to work. nfsv4etch:~# telnet -k AD.ENGR.UCONN.EDU -l rohitm nfsv4etch Trying 127.0.1.1... Connected to nfsv4etch (127.0.1.1). Escape character is '^]'. telnetd: Authorization failed. Connection closed by foreign

Re: help with Active Directory Kerberos authentication

2006-10-06 Thread Christopher D. Clausen
Russ Allbery [EMAIL PROTECTED] wrote: Rohit Kumar Mehta [EMAIL PROTECTED] writes: Kerberized telnet does not seem to work. nfsv4etch:~# telnet -k AD.ENGR.UCONN.EDU -l rohitm nfsv4etch Trying 127.0.1.1... Connected to nfsv4etch (127.0.1.1). 127.0.1.1 ? Uhh, that doesn't look right. Edit