Dotaz: Prihlaseni do linuxu pres AD v MS w2k3 serveru

[Petr]

hoj,

mam tento problem s Kerberosem

----------------------------

[root@linuxst01 ~]# kinit administrator

Password for administrator@EXAMPLE:

kinit(v5): KDC reply did not match expectations while getting initial credentials

----------------------------

konfig kerberosu

----------------------------

[root@linuxst01 ~]# cat /etc/krb5.conf

[logging]

default = /var/log/krb5lib.log

[libdefaults]

ticket_lifetime = 24000

default_realm = EXAMPLE

default_tkt_enctypes = des3-hmac-sha1 des-cbc-crc des-cbc-md5 aes256-cts arcfour-hmac-md5

default_tgs_enctypes = des3-hmac-sha1 des-cbc-crc des-cbc-md5 aes256-cts arcfour-hmac-md5

[realms]

EXAMPLE = {

kdc = fs2003.example.cz

admin_server = fs2003.example.cz

default_domain = EXAMPLE

}

[domain_realm]

.example = EXAMPLE

example = EXAMPLE

----------------------------

fs2003.example.cz je A zaznam v DNS, s ipkou 192.168.0.205 je to to same

EXAMPLE je nazev radice domeny, tedy MS Active Directory

pripad je ve fedore core7 a opensuse10.2 uplne stejny :[[

Diky za pomoc

Odpovědi

[Michal]

Hoja,

Mne to jede s timhle:

cat /etc/krb5.conf

[libdefaults]
        default_realm = DOMENA.CZ
        forwardable = true
        proxiable = true

[realms]
DOMENA.CZ = {
        kdc = server1.domena.cz
        kdc = server2.domena.cz
        admin_server = server1.domena.cz
        default_domain = domena.cz
}

[domain_realm]
        .domena.cz = DOMENA.CZ
        domena.cz = DOMENA.CZ

[Petr]

hmm, tak to mi taky nefunguje, nemuze byt treba neco spatne na tom MS serveru?? je v modu mixed tusim, coz je ten jak podporuje i win 9x, takze v tom snad problem neni.