Rohit Kumar Mehta wrote:
> Hey guys, I did an "apt-get install libpam-krb5" which removed > libpam-heimdal, and the problem is now gone. (I reproduced the problem > in both Debian-etch and Ubuntu-dapper). I am guessing there > is some problem with the heimdal libs. > Now I can ssh to the machine using Active Directory credentials. What do you mean by this? Send you user/password from ssh to sshd, and use keyboard-interactive? Or do you mean use gssapi-with-mic? > However, even though klist shows my ticket, On which machine, the ssh client machine or the sshd server? I cannot do passwordless authentication. What do you mean by this? > > I am guessing that setup is a little more involved and requires a keytab > and adding records to the Active Directory. Yes you would need these for gssapi-with-mic to work. The simple method is: http://www.microsoft.com/technet/prodtechnol/windows2000serv/howto/kerbstep.mspx Does anyone know if this > is correct? > > ________________________________________________ > Kerberos mailing list [email protected] > https://mailman.mit.edu/mailman/listinfo/kerberos > > -- Douglas E. Engert <[EMAIL PROTECTED]> Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
