08-18-2008
Thanks for your reply
As a result of your link I found this:
"To learn more on the Kerberos APIs, refer to the IBM Network Authentication Service Version 1.4 Application Development Reference guide shipped on the AIX 5L Version 5.3 Expansion Pack CD and the sample Kerberos example programs bundled with the IBM NAS product."
My system admin installed what I needed and there was indeed a samples directory which contained exactly what I needed
There's a source code example called krb_login.c which shows how to authenticate with the principal and password and there's even a keytab version along with other examples:
- Login using principal and password
- Login from keytab
- List credentials
- Destroy credentials
- Create principal
- Delete principal
There's even a complete client/server implementation too!
9 More Discussions You Might Find Interesting
1. Linux
Hi,
Anyone can point me a good link to setup IPSec using racoon IKE which uses gssapi_krb authentication method?
I have a debain linux box and Windows 2003R2 system, and I want them to communicate using IPSec.
Thanks,
Emily. (0 Replies)
Discussion started by: egyfan
0 Replies
2. Programming
I am in the process of developing a application that needs to be able to authenticate users details with a kerberos server, which is proving to be rather difficult. There seems to be a lack of good information on how to do this using the MIT kerberos api.
Can anyone point me in the right... (0 Replies)
Discussion started by: mshindo
0 Replies
3. Red Hat
Hi,
I've configured two linux boxes to authenticate against Windows Active Directory using Kerberos while retrieving authorization data (uids, gids ,,,)from NIS.
The problem I ran into with my PAM configuration is that all authentication attempts succeed in order.i.e. if someone tried his... (0 Replies)
Discussion started by: geek.ksa
0 Replies
4. Programming
Hi, all,
I am a newbie to linux authentication part.
Questions below really puzzle me:
How to authenticate users from local storage(passwd shadow) and nis server?
(Without PAM)
getpwnam_r() will return a '*' in the pw_passwd field of "struct passwd".
I can parse /etc/shadow. But how... (1 Reply)
Discussion started by: mythmgn
1 Replies
5. AIX
I've configured an AIX 5.3 client to use our Windows AD for user authentication via Kerberos.
When I try to ssh to the server using the AD credentials, I eventually get access but not after getting prompted for a password 3 times (which doesn't work) followed by an accepted login on the 4th... (3 Replies)
Discussion started by: jmroderick
3 Replies
6. Programming
Hi All,
I have a thick client based on swing java and we are using CA SiteMinder for the authentication. Now we have new requirement in which we need to access the application when its offline.
So is there any way that I can use siteminder for offline authenticaion?
I mean can we store... (0 Replies)
Discussion started by: chacko193
0 Replies
7. UNIX for Dummies Questions & Answers
Hi ,
I am trying to authenticate my id on client server with Kerberos and receiving below error
kinit rpagadala@BDC.soft.net
kinit: Cannot contact any KDC for realm 'BDC.soft.net' while getting initial credentials
Please find krb5.conf on the client server configuration which is... (1 Reply)
Discussion started by: Tomlight
1 Replies
8. Shell Programming and Scripting
Hi All,
I am currently writing script to get the details for lot of hosts from jump server. Means each and every time it will ssh to the host and get the information. To achieve that I need to automatically accept the password from Jump server to that main hosts. We are using kerberos password... (6 Replies)
Discussion started by: kamauv234
6 Replies
9. Shell Programming and Scripting
I am installing Authen::Krb5::Easy and during make test I am getting the follwing error :
kinit not ok 2
error was: could not get initial credentials: Cannot contact any KDC for requested realm
we are stroring krb5.conf in diff location ( not in /etc/krb5.conf) , but, PERL is... (1 Reply)
Discussion started by: talashil
1 Replies
LEARN ABOUT X11R4
kpasswd
kpasswd(1) User Commands kpasswd(1)
NAME
kpasswd - change a user's Kerberos password
SYNOPSIS
/usr/bin/kpasswd [principal]
DESCRIPTION
The kpasswd command is used to change a Kerberos principal's password. kpasswd prompts for the current Kerberos password, which is used to
obtain a changepw ticket from the KDC for the user's Kerberos realm. If kpasswd successfully obtains the changepw ticket, the user is
prompted twice for the new password, and the password is changed.
If the principal is governed by a policy that specifies the length and/or number of character classes required in the new password, the new
password must conform to the policy. (The five character classes are lower case, upper case, numbers, punctuation, and all other charac-
ters.)
OPERANDS
The following operand is supported:
principal
Change the password for the Kerberos principal principal. Otherwise, the principal is derived from the identity of the user invoking
the kpasswd command.
FILES
/tmp/ovsec_adm.xxxxxx
Temporary credentials cache for the lifetime of the password changing operation. (xxxxxx is a random string.)
ATTRIBUTES
See attributes(5) for descriptions of the following attributes:
+-----------------------------+-----------------------------+
| ATTRIBUTE TYPE | ATTRIBUTE VALUE |
+-----------------------------+-----------------------------+
|Availability |SUNWkrbu |
+-----------------------------+-----------------------------+
|CSI |Enabled |
+-----------------------------+-----------------------------+
SEE ALSO
SEAM(5)
BUGS
If kpasswd is suspended, the changepw tickets may not be destroyed.
SunOS 5.10 30 Jul 2001 kpasswd(1)