Latest LQ Deal: Latest LQ Deals
Go Back > Forums > Linux Forums > Linux - Software
User Name
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.


  Search this Thread
Old 06-09-2009, 02:44 PM   #1
Registered: Jan 2005
Distribution: fedora, redhat, gentoo, suse
Posts: 30

Rep: Reputation: 15
Managing multiple kerberos/ADS realms

I have several linux boxes that are using Active Directory for kerberos-based authentication. this works fine for all the users in the default realm. Users can ssh into the box just like they would on any other linux server. However, users from other realms can't log in. The pam/kerberos module attempts to authenticate them against the default realm and it fails. Here is my krb5.conf from a SLES10 box:

        default_realm = REALM1.MYDOM.COM
        clockskew = 300
        #dns_lookup_realm = true

        kdc =
        default_domain =
        admin_server =
        kdc =
        default_domain =
        admin_server =

        kdc = FILE:/var/log/krb5/krb5kdc.log
        admin_server = FILE:/var/log/krb5/kadmind.log
        default = SYSLOG:NOTICE:DAEMON

pam = {
        ticket_lifetime = 1d
        renew_lifetime = 1d
        forwardable = true
        proxiable = false
        retain_after_close = false
        minimum_uid = 1
        try_first_pass = true

How can I get a user from REALM2 to log in via ssh?



Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
kerberos authentication for multiple realms sakshale Linux - Security 2 11-20-2008 12:02 PM
...of Samba ADS security, Kerberos, and AD on Windows 2003 zerovice Linux - Enterprise 6 10-19-2006 12:07 PM
ADS / winbind / samba / kerberos HELP!!! jsheffie Red Hat 5 08-16-2006 09:01 AM
Samba, Kerberos and ADS problems deadlock Linux - Networking 0 01-26-2006 11:27 AM
suse9.1client W2k ADS kerberos and pam fatcake Linux - Networking 1 06-09-2005 01:27 AM > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 10:59 PM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration