LinuxQuestions.org
Go Job Hunting at the LQ Job Marketplace
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices

Reply
 
Search this Thread
Old 08-03-2009, 11:28 AM   #1
ceph
LQ Newbie
 
Registered: Jun 2003
Location: New York
Distribution: gentoo 2006; mac osx server
Posts: 16

Rep: Reputation: 0
Kerberos and SSH


Hello,

I have a fedora core 11 server with kerberos all set up and working. I can log in to the machine with domain accounts without a problem. SSH, however, is not working correctly. I believe the issue is with supplying the domain, more specifically - the domain separator.


When trying: DOMAIN/user.name
/var/log/secure: input_userauth_request: invalid user DOMAIN

When trying: DOMAIN\user.name
/var/log/secure: input_userauth_request: invalid user DOMAINuser.name

When trying: DOMAIN+user.name
/var/log/secure: input_userauth_request: invalid user DOMAIN+user.name


for each attempt I have changed the winbind separator option to the character used.

Here is my sshd_config:

Code:
Protocol 2

SyslogFacility AUTHPRIV

RSAAuthentication no
PubkeyAuthentication no

PasswordAuthentication yes

ChallengeResponseAuthentication no

KerberosAuthentication yes
KerberosOrLocalPasswd yes
KerberosTicketCleanup yes

UsePAM yes

AcceptEnv LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES
AcceptEnv LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT
AcceptEnv LC_IDENTIFICATION LC_ALL LANGUAGE

X11Forwarding yes

Subsystem	sftp	/usr/libexec/openssh/sftp-server

Any ideas?

Thanks,
Ryan
 
  


Reply

Tags
kerberos, ssh


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
SSH + PAM + Kerberos questions Akegata Linux - Security 9 06-13-2009 10:50 AM
Multiple ssh authentication (kerberos, unix) to display different 'password:' true_atlantis Linux - Server 0 03-12-2009 03:02 PM
Kerberos and SSH l0rddarkf0rce Linux - Server 0 10-26-2008 04:50 PM
SSH and Kerberos l0rddarkf0rce Ubuntu 0 10-26-2008 02:30 AM
Authenticate ssh logins against kerberos / Active directory rosv Linux - Security 1 09-11-2008 07:16 AM


All times are GMT -5. The time now is 03:41 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration