PAM and kerberos automatic authentication

From: sam (sam.khair_at_timeslice.co.uk)
Date: 03/30/04 

Date: 30 Mar 2004 02:27:49 -0800

Hi,

I am trying to set up my linux PC to automatically authenticate
against a (windows AD) KDC on login. At the moment I can do it
manually using the kinit username@REALM.COM and using klist to confirm
I have been granted a TGT.

I have added the following to the /etc/pam.d/sys-auth file after the
pam_unix.so line in reach of their respective sections.

auth sufficient /lib/security/pam_krb5.so use_first_pass
forwardable

password sufficient /lib/security/pam_krb5.so use_authtok

session optional /lib/security/pam_krb5.so

I then restarted linux and logged in as a user that exists both on the
linux PC and the AD domain with the same password. On checking the
tickets issued, using klist, I found no TGT was issued. Am I going
about this completly the wrong way or have I missed something?

I am using Redhat 9 and have confirmed that the pam_krb5 rpm has been
installed.

Thanks for any help.

Relevant Pages

  • Problem with keytab file. TGT issued even when old keytab file is used
    ... I have a query related to getting TGT using the keytab file. ... Linux to get the TGT. ... I see that the keyversion number is incremented to 4. ...
    (comp.protocols.kerberos)
  • Re: Problem with keytab file. TGT issued even when old keytab file is used
    ... I have a query related to getting TGT using the keytab file. ... Linux to get the TGT. ... I see that the keyversion number is incremented to 4. ...
    (comp.protocols.kerberos)
  • Re: PAM and kerberos automatic authentication
    ... > I then restarted linux and logged in as a user that exists both on the ... > tickets issued, using klist, I found no TGT was issued. ... # User changes will be destroyed the next time authconfig is run. ... account sufficient /lib/security/pam_winbind.so ...
    (linux.redhat)
  • Re: Linux authentication via AD
    ... Primarily I need to integrate Linux ... servers, but I do have a few OpenBSD servers. ... > a way to do this under older AIX) allows people to login authenticating ... > text passwords authenticate to the Windows Password Server as well. ...
    (comp.os.linux.security)
  • Re: linux to unix
    ... becuase I only can login and use my applications. ... we can migrate our clients to linux. ... I have found that several SCO Unix text mode applications ...
    (alt.os.linux)