Linux Kerberos - Revision history

Pio2pio: /* Install */

2019-06-17T23:41:48Z

Install

← Older revision		Revision as of 01:41, 18 June 2019
Line 1:		Line 1:
	= Install =		= Install Kerberos Linux Client =
	In order to authenticate to a Kerberos Realm, the krb5-user and libpam-krb5 packages are needed, along with a few others that are not strictly necessary but make life easier. To install the packages enter the following in a terminal prompt:		In order to authenticate to a Kerberos Realm, the krb5-user and libpam-krb5 packages are needed, along with a few others that are not strictly necessary but make life easier. To install the packages enter the following in a terminal prompt:
	<source lang=bash>		<source lang=bash>

Pio2pio: /* Destroy any current kerberos tickets */

2019-06-17T23:38:35Z

Destroy any current kerberos tickets

← Older revision		Revision as of 01:38, 18 June 2019
Line 30:		Line 30:
	== Destroy any current kerberos tickets ==		== Destroy any current kerberos tickets ==
	$ kdestroy		$ kdestroy

			= Resources =
			* [https://help.ubuntu.com/lts/serverguide/kerberos.html.en#kerberos-linux-client Kerberos] Ubuntu

Pio2pio: /* Install */

2019-06-17T23:38:07Z

Install

← Older revision		Revision as of 01:38, 18 June 2019
Line 1:		Line 1:
	= Install =		= Install =
			In order to authenticate to a Kerberos Realm, the krb5-user and libpam-krb5 packages are needed, along with a few others that are not strictly necessary but make life easier. To install the packages enter the following in a terminal prompt:
			<source lang=bash>
			sudo apt install krb5-user libpam-krb5 libpam-ccreds auth-client-config
			</source>

	= Operations =		= Operations =

Pio2pio: /* Use keytab file */

2018-01-10T07:09:06Z

Use keytab file

← Older revision		Revision as of 09:09, 10 January 2018
Line 23:		Line 23:
	Obtain a ticket		Obtain a ticket
	kinit ppawl@TPPLC.LOCAL -k -t ~/.ssh/user1.keytab		kinit ppawl@TPPLC.LOCAL -k -t ~/.ssh/user1.keytab

			== Destroy any current kerberos tickets ==
			$ kdestroy

Pio2pio: Created page with "= Install = = Operations = == Obtain a ticket == $ kinit user1@DOMAIN.LOCAL == Use keytab file == This creates secure a file containing credentials. Default keytab file is..."

2018-01-10T07:06:33Z

Created page with "= Install = = Operations = == Obtain a ticket == $ kinit user1@DOMAIN.LOCAL == Use keytab file == This creates secure a file containing credentials. Default keytab file is..."

New page

= Install =

= Operations =

== Obtain a ticket ==
$ kinit user1@DOMAIN.LOCAL

== Use keytab file ==
This creates secure a file containing credentials. Default keytab file is <tt>/etc/krb5.keytab</tt>
$ ktutil
ktutil: addent -password -p user1@DOMAIN.LOCAL -k 1 -e aes256-cts
Password for user1@DOMAIN.LOCAL: *********
ktutil: wkt user1.keytab
ktutil: quit

List credentials
$ klist -k user1.keytab
Keytab name: FILE:ppawl.keytab
KVNO Principal
---- --------------------------------------------------------------------------
1 user1@DOMAIN.LOCAL

Obtain a ticket
kinit ppawl@TPPLC.LOCAL -k -t ~/.ssh/user1.keytab