[Fedora-directory-users] FDS and Kerberos in Windows Domain

[Seppel]

Hi,

I have installed a fds 1.1 on centos.

I would like to use the kerberos authentication feature from my MS 
ActiveDirectory Domäin.
I am new with kerberos.
I found a howto but this howto is for Linux Kerberos and not for MS 
Kerberos. Does anybody can provide a howto use MS Kerberos for FDS 
authentication?

Thanks in advance
seppel

[Seppel]

Seppel schrieb:
>  Hi,
>
>  I have installed a fds 1.1 on centos.
>
>  I would like to use the kerberos authentication feature from my MS 
>  ActiveDirectory Domäin.
>  I am new with kerberos.
>  I found a howto but this howto is for Linux Kerberos and not for MS 
>  Kerberos. Does anybody can provide a howto use MS Kerberos for FDS 
>  authentication?
>
>  Thanks in advance
>  seppel
>
>  -- 
>  Fedora-directory-users mailing list
>  Fedora-directory-users(a)redhat.com
>  https://www.redhat.com/mailman/listinfo/fedora-directory-users
>  
Did nobody use kerberos authentication with fds?

Nobody in MS Kerberos?

thanks
seppel

[Alessandro Orsaria]

Hi,

To use MS Kerberos for authentication and FDS for authorization,
configure your Linux as a Kerberos client (/etc/krb5.conf).

Then, in /etc/pam.d/system-auth you should have 3 lines like:
   auth        sufficient    pam_krb5.so try_first_pass
   account     [default=bad success=ok user_unknown=ignore] pam_ldap.so
   account     required      pam_access.so accessfile=/etc/security/access.conf

and map which users/groups should be allowed to access your machines
in access.conf.

A.

2009/1/13 Seppel <cw-news(a)gmx.de&gt;:
>  Seppel schrieb:
> >
> > Hi,
> >
> > I have installed a fds 1.1 on centos.
> >
> > I would like to use the kerberos authentication feature from my MS
> > ActiveDirectory Domäin.
> > I am new with kerberos.
> > I found a howto but this howto is for Linux Kerberos and not for MS
> > Kerberos. Does anybody can provide a howto use MS Kerberos for FDS
> > authentication?
> >
> > Thanks in advance
> > seppel
> >
> > --
> > Fedora-directory-users mailing list
> > Fedora-directory-users(a)redhat.com
> > https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >
>  Did nobody use kerberos authentication with fds?
>
>  Nobody in MS Kerberos?
>
>  thanks
>  seppel
>
>  --
>  Fedora-directory-users mailing list
>  Fedora-directory-users(a)redhat.com
>  https://www.redhat.com/mailman/listinfo/fedora-directory-users
>