Ben's notes

Linux, Unix, network, radio...

User Tools

Site Tools


rhel7_kerberos

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
Next revisionBoth sides next revision
rhel7_kerberos [2016/03/30 10:42] – [SSH clients] adminrhel7_kerberos [2016/03/30 10:52] – [SSH clients] admin
Line 150: Line 150:
  
 ===Configure SSH Server=== ===Configure SSH Server===
 +  * Configure server as LDAP client: [[ldap:centos7client]]
   * Edit ''/etc/ssh/sshd_config'' file to include the following lines:<code>   * Edit ''/etc/ssh/sshd_config'' file to include the following lines:<code>
 KerberosAuthentication yes KerberosAuthentication yes
Line 162: Line 163:
   GSSAPIDelegateCredentials yes   GSSAPIDelegateCredentials yes
 </code> </code>
-  * Create keytab:<code>ktutil 
-addent -password -p username@MYDOMAIN.COM -k 1 -e RC4-HMAC 
-- enter password for username - 
-wkt /etc/krb5.keytab 
-q</code> 
   * Retrieve ticket:<code>kinit benst</code>   * Retrieve ticket:<code>kinit benst</code>
   * Login to other host:<code>ssh user@host</code>   * Login to other host:<code>ssh user@host</code>
rhel7_kerberos.txt · Last modified: 2021/10/09 15:14 by 127.0.0.1