Kerberos Authentication

Comatose51 · Tux's lil' helper Joined: 29 Jun 2003 Posts: 103

Anyone know how to make your Linux box accept Kerberos authentication at login?

I work in a Microsoft shop that uses Active Directory. AD can do Kerberos. I have emerge mit_krb5 and pam_krb5. I've configured krb5 so that kinit will authenticate with my domain controller. However, I can't figure out how to go from here to making my box allow logins base on krb5 authentication.

Thanks.

fvant · Posted: Thu Aug 25, 2005 12:12 pm Post subject:

can you get a kerberos ticket with kinit ?

Then you need to configure pam (/etc/pam.d/system-auth) and emerge pam if not already done so.

while testing, make sure you leave root logged in ! if you mess up pam configuration, chances are no user can log in anymore (back to singleuser mode to fix that, if this happens).
Pam changes do not require reboots and take effect immediately. Except for gdm, you'll need to restart it to reread it's config.