Setting up a kerberos client machine
Setting up a kerberos client machine
The client machine needs to know where the kerberos server (kdc) is and what realm it should use. All is set up in the krb5.conf file on our kerberos server. Just copy the file over to the client machine. On the client machine enter:
cd /etc scp kerberos.redflo.de:/etc/krb5.conf .
We can instantly test it on the client machine:
kinit joe
Password for joe@REDFLO.DE:
klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: joe@REDFLO.DE
Valid starting Expires Service principal
07/21/05 16:28:48 07/22/05 02:28:48 krbtgt/REDFLO.DE@REDFLO.DE
renew until 07/22/05 16:30:17
Kerberos 4 ticket cache: /tmp/tkt0
klist: You have no tickets cached
Note: On Solaris 10 the kerberos client config is at
/etc/krb5/krb5.conf
Created by system. Last Modification: Monday 14 of January, 2008 00:14:09 UTC by redflo.
Category: UNIX
-
wiki page:
- How to use Microsoft Active Directory with postfix
- inserting the first object in your ldap directory
- Installing the mailsystem packages
- Integrating LDAP in your unix system
- Introduction
- Kerberizing kadmin
- Kerberizing sshd
- Kerberos setup
- LDAP
- LDAP schema files
- logging
- Motivation
- nss_ldap security
- OpenLDAP config files
- Other documentation
- performing a first ldap query
- PerfParse
- populating the directory
- Postfix and cyrus imapd and kerberos and LDAP
- Setting up a kerberos client machine
- Setting up your Kerberos servers
- SIngle sign on (SSO) first try
- SSO and Central Administration with Kerberos and LDAP
- Start the kerberos servers
- The configuration files
- The name service switch
- Tweak pam
- Understanding Kerberos
- Understanding Kerberos pt. 2
- Webserver Stress Test Tools
- What is LDAP?
- What the heck is pam?
- What we need
- What we want
- Audience
- Authenticating
- Bash script with timeout function
- Check Processes
- Check your installation
- Choosing a Realm
- configure your mail client
- Configuring and understanding pam
- configuring cyrus imapd
- configuring postfix
- Connect to kadmind and have a look into the database
- Creating the kerberos database
- Edit the Kerberos Admin Server ACL config
- Edit the kerberos client config file
- Edit the kerberos server config file
- Excursus to principals
- exploring schemas
- Fight Image Spam
- Fight Spam best practice
- adding a group
- Adding principals and authenticating
- Another principal
- nss with Solaris 10
- SerialConsole






