Auth against AD (kerberos) does not work Post: 302677331

Sponsored Content

Operating Systems AIX Auth against AD (kerberos) does not work Post 302677331 by tomys on Thursday 26th of July 2012 03:06:40 AM

07-26-2012

Registered User

With the question

"Why registry=files ?"

I want to know, why the lsuser shows me registry=files even i have set registry to KRB5files with chuser.

I see in the /etc/security/user files that both values (registry and system) are set to KRB5files.

I find out, that this is a problem display problem which us known by IBM auf the lsuser command.

Code:

root@HOST[!]/etc/krb5>>grep -p kbtest /etc/security/user
kbtest:                                                     
        admin = false                                       
        registry = KRB5files                                
        SYSTEM = "KRB5files"                                
                                                            
root@HOST[!]/etc/krb5>>lsuser -a registry kbtest        
kbtest registry=files

---------- Post updated at 09:06 AM ---------- Previous update was at 08:45 AM ----------

Hi,

i have done the changes in the krb5.conf with no success.

Same entry in syslog.log

Code:

 Jul 26 09:01:52 HOST auth|security:info syslog: pts/4: failed login attempt for UNKNOWN_USER from remote.host                                          
kinit kbuser -> Works fine. The authentication by kinit is done with the DC.

Is it possible, that we have to configure our Kerberos-Service at the Windows DC ???

Last edited by Scott; 07-27-2012 at 04:55 AM.. Reason: Code tags

tomys

View Public Profile for tomys

Find all posts by tomys

9 More Discussions You Might Find Interesting

1. UNIX for Advanced & Expert Users

Apache auth question

While not technically a unix question, I was hoping for some help from you all- I've got an Apache 1.3.x server, and I am using basic auth from the pam_auth module and winbind on the back of that. What I get is a relaly sleek authentication for my Windos domain users, however, as they are wont...

2. IP Networking

netscape console auth problem

:( hi all , i have installed netscape console on my local pc to connect to webmail server using LDAP . when i try to login from my console i get an error "Http Exception: Response: Http/1.1 500 Server Error Status 500" i was told that i need to add my IP to the local.conf file. ...

3. UNIX for Advanced & Expert Users

Solaris 10 auth issue

Very strange one, we've got a recently build server (Sol10 via JET flash). Bascially you can ssh to it fine, but telnet will allow entry of username, but will then feed in a carriage return on the passwd field, this also happens on any auth type command, ie passwd on a user account will also...

4. AIX

Kerberos and LDAP Auth

Good day I am trying to configure Kerberos and LDAP authentication on AIX 5.3 with Windows 2003 R2 but something is not quite right. When I ran kinit username I get a ticket and I can display it using klist. When the user login I can see the ticket request on Windows 2003, but the user...

5. Shell Programming and Scripting

Difference in auth key commands?

Good morning! What is the difference between: ssh-keygen -t rsa and ssh-keygen -b 2048 -t rsa? Thanks Bigben

6. Red Hat

sendmail client with AUTH

HI, I use redhat 5.7 . I configure sendmail as client and deliver the email to the external SMTP server(10.1.1.176) . The smtp server need SMTP AUTH in order to send email with SMTP. I configure and follow this link . Sendmail as SMTP Authentication | Free Linux Tutorials I try to send...

7. Solaris

Sol10 - OpenLDAP Auth

Hi, im new to Solaris (10) and need some help please. Situation: Actually is there a Linux (SLES11) OpenLDAP-Server and authentification of Linux-Maschines works pretty sweet. Now i want to put the SOL10 (Sparc) boxes in.... Problem: User Authentification via OpenLDAP on Sol10 doesn�t work...

8. Gentoo

LDAP-Auth does not work correctly with systemd

Hi, since the upgrade to Gnome 3.6 (now i have 3.8) the authentication over LDAP stops working. The whole machine does not start anymore. The machine boot, but no gdm and no X. I can login, with root, but then the tty hangs. When i look at ttyF12 i see a lot of systemd service the runs random,...

9. Solaris

Solaris 11 iscsi chap auth

hi to all i've done that steps, but i was not completely successful: sudo pkg install group/feature/storage-server sudo svcadm enable stmf sudo zfs create -V 1g rpool/LUN1 sudo stmfadm create-lu /dev/zvol/rdsk/rpool/LUN1 sudo stmfadm list-lu ...

LEARN ABOUT MOJAVE

moose::meta::typeconstraint::registry5.18

Moose::Meta::TypeConstraint::Registry(3)		User Contributed Perl Documentation		  Moose::Meta::TypeConstraint::Registry(3)

NAME

       Moose::Meta::TypeConstraint::Registry - registry for type constraints

VERSION

       version 2.1202

DESCRIPTION

       This class is a registry that maps type constraint names to Moose::Meta::TypeConstraint objects.

       Currently, it is only used internally by Moose::Util::TypeConstraints, which creates a single global registry.

INHERITANCE

       "Moose::Meta::TypeConstraint::Registry" is a subclass of Class::MOP::Object.

METHODS

       Moose::Meta::TypeConstraint::Registry->new(%options)
	   This creates a new registry object based on the provided %options:

	   o	   parent_registry

		   This is an optional Moose::Meta::TypeConstraint::Registry object.

	   o	   type_constraints

		   This is hash reference of type names to type objects. This is optional. Constraints can be added to the registry after it is
		   created.

       $registry->get_parent_registry
	   Returns the registry's parent registry, if it has one.

       $registry->has_parent_registry
	   Returns true if the registry has a parent.

       $registry->set_parent_registry($registry)
	   Sets the parent registry.

       $registry->get_type_constraint($type_name)
	   This returns the Moose::Meta::TypeConstraint object from the registry for the given name, if one exists.

       $registry->has_type_constraint($type_name)
	   Returns true if the registry has a type of the given name.

       $registry->add_type_constraint($type)
	   Adds a new Moose::Meta::TypeConstraint object to the registry.

       $registry->find_type_constraint($type_name)
	   This method looks in the current registry for the named type. If the type is not found, then this method will look in the registry's
	   parent, if it has one.

BUGS

       See "BUGS" in Moose for details on reporting bugs.

AUTHORS

       o   Stevan Little <stevan.little@iinteractive.com>

       o   Dave Rolsky <autarch@urth.org>

       o   Jesse Luehrs <doy@tozt.net>

       o   Shawn M Moore <code@sartak.org>

       o   XXXX XXX'XX (Yuval Kogman) <nothingmuch@woobling.org>

       o   Karen Etheridge <ether@cpan.org>

       o   Florian Ragwitz <rafl@debian.org>

       o   Hans Dieter Pearcey <hdp@weftsoar.net>

       o   Chris Prather <chris@prather.org>

       o   Matt S Trout <mst@shadowcat.co.uk>

COPYRIGHT AND LICENSE

       This software is copyright (c) 2006 by Infinity Interactive, Inc..

       This is free software; you can redistribute it and/or modify it under the same terms as the Perl 5 programming language system itself.

perl v5.18.2							    2014-01-19				  Moose::Meta::TypeConstraint::Registry(3)