Answer the question
In order to leave comments, you need to log in
How to fix kinit authorization?
Hello!
I can't figure out where to fix it. I'm trying to set up a Linux server for domain authorization according to this guide .
I got to point 8 and ran into the problem of removing backslashes between the domain and the user. I was convinced that this is due to the Kerberos setting.
krb5.conf
[logging]
default = FILE:/var/log/kerberos/krb5libs.log
kdc = FILE:/var/log/kerberos/krb5kdc.log
admin_server = FILE:/var/log/kerberos/kadmind.log
[libdefaults]
default_realm = MYDOMAIN.LOCAL
dns_lookup_realm = true
dns_lookup_kdc = true
rdns = true
ticket_lifetime = 24h
default_keytab_name = /etc/squid/private/HTTP.keytab
allow_weak_crypto = true
forwardable = yes
[realms]
MYDOMAIN.LOCAL = {
kdc = lpn-srv-dc-01.mydomain.local
kdc = lpn-srv-dc-02.mydomain.local
admin_server = lpn-srv-dc-01.mydomain.local
default_domain = mydomain.local
}
[domain_realm]
.mydomain.local = MYDOMAIN.LOCAL
mydomain.local = MYDOMAIN.LOCAL
[appdefaults]
pam = {
debug = true
ticket_lifetime = 36000
renew_lifetime = 36000
forwardable = true
krb4_convert = false
}
[login]
krb4_convert = true
krb4_get_tickets = false
# kinit [email protected]
Password for [email protected]:
# klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: [email protected]
Valid starting Expires Service principal
26.07.2017 16:56:23 27.07.2017 02:56:23 krbtgt/[email protected]
renew until 27.07.2017 16:56:20
# kinit "MYDOMAIN\my.user"
kinit: Client '[email protected]' not found in Kerberos database while getting initial credentials
# kinit "MYDOMAIN\\my.user"
kinit: Client '[email protected]' not found in Kerberos database while getting initial credentials
# kinit "MYDOMAIN.LOCAL\\my.user"
kinit: Client '[email protected]' not found in Kerberos database while getting initial credentials
Answer the question
In order to leave comments, you need to log in
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question