Sponsored Content
Operating Systems AIX How to use AD accounts in AIX? Post 302942567 by aaron8667 on Wednesday 29th of April 2015 05:00:51 PM
Old 04-29-2015
Thank you for your time. I actually tried setting up in similar manner after i found some post on unix.com

but for some reason, it did not work. May be i missed something. please see the error below.

Code:
[root@aixlpar]/home/root>/usr/krb5/bin/kinit user7@domain.com
Unable to obtain initial credentials.
        Status 0x96c73a44 - KRB5 error code 68.


Code:
[root@aixlpar]/home/root>/usr/krb5/bin/klist
Unable to get cache name (ticket cache: /var/krb5/security/creds/krb5cc_0).
        Status 0x96c73ac3 - No credentials cache found.


I will look into it again. And i've looked at the above link (IBM ). not yet started.
It has the information about integrating Active directory with kerberos & LDAP as well.

I would like to go with Kerberos option for now. As this is a test server, i would like to test this out now.

please let me know if you've any suggestions.

---------- Post updated at 15:00 ---------- Previous update was at 14:55 ----------

adding info from my test server

Code:
[root@aixlpar]/home/root>cat /etc/krb5/krb5.conf
[libdefaults]
        default_realm = domain.com
        default_keytab_name = FILE:/etc/krb5/krb5.keytab
        default_tkt_enctypes = des3-cbc-sha1 arcfour-hmac aes256-cts des-cbc-md5 des-cbc-crc aes128-cts
        default_tgs_enctypes = des3-cbc-sha1 arcfour-hmac aes256-cts des-cbc-md5 des-cbc-crc aes128-cts

[realms]
        DOMAIN.COM = {
                kdc = msadserver.domain.com:88
                admin_server = msadserver.domain.com:749
                default_domain = domain.com
        }

[domain_realm]
        .domain.com = DOMAIN.COM
        msadserver.domain.com = DOMAIN.COM

[logging]
        kdc = FILE:/var/krb5/log/krb5kdc.log
        admin_server = FILE:/var/krb5/log/kadmin.log
        kadmin_local = FILE:/var/krb5/log/kadmin_local.log
        default = FILE:/var/krb5/log/krb5lib.log

Code:
/usr/lib/security/methods.cfg

KRB5A:
        program = /usr/lib/security/KRB5A
        options = authonly,tgt_verify=no,kadmind=no,is_kadmind_compat=no

KRB5Afiles:
        options = db=BUILTIN,auth=KRB5A

 

8 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

Mail accounts

Hi there I am a newbie. want to learn followings: 1. How can i create an mail only account.? 2. Where is the file containing mail accounts?What is the path? 3. Can i create mail accounts from PHP? Thanx (3 Replies)
Discussion started by: vbs
3 Replies

2. UNIX for Advanced & Expert Users

creating user accounts in AIX

Hello all: I am new to UNIX and I am given the responsibility of administering a UNIX machine recently. The system is a IBM AIX 3.1. As a part of my duties I recently created some user accounts using "smit". It looked as if everything went well. But, after creating the account, I logged into... (3 Replies)
Discussion started by: pdepa
3 Replies

3. Shell Programming and Scripting

User Accounts

I have found a script to create user accounts. But there are a few lines i dont understand. Can someone help me with this? Here's the code: ###################################### while ; do ACCT=${USER_ACCT}${START} START=`expr $START + 1` START=`echo ${START} | awk... (3 Replies)
Discussion started by: Sensor
3 Replies

4. HP-UX

Activated accounts

Hello all, I am trying to list all accounts that are still activated on a HP-UX trusted system. I have tried to do something with the modprpw command but can't think of any way. Can someone give me a hint? I am not looking for a whole script, this I can do it, but just a way to get that into a... (1 Reply)
Discussion started by: qfwfq
1 Replies

5. Post Here to Contact Site Administrators and Moderators

Combine Accounts

I have two different accounts under two names. That is my fault and I own that issue. I would like to combine the two account or just remove one of them. How do I go about doing that on this site. (1 Reply)
Discussion started by: crobinson
1 Replies

6. Post Here to Contact Site Administrators and Moderators

combine accounts

I have two accounts, one for gmail and one for all other Google applications. I would like to put the gmail account on the same account as the others. I like Google, and all the products offered. However, it has been very difficult and frustrating to find this forum, and to figure out how to... (2 Replies)
Discussion started by: chaimelle
2 Replies

7. Solaris

Help with user accounts

Hi All, How to know all the shells a user has access. Thank you . (0 Replies)
Discussion started by: rama krishna
0 Replies

8. Shell Programming and Scripting

Finding AIX user accounts expired or locked

// AIX 6.1 In need of finding which AIX user accounts will be expired and are locked. I have placed the following parameters under /etc/security/user... (1 Reply)
Discussion started by: Daniel Gate
1 Replies
SYNC-ACCOUNTS-CREATEUSER(8)					 chiark utilities				       SYNC-ACCOUNTS-CREATEUSER(8)

NAME
sync-accounts-createuser - helper/hook program for sync-accounts SYNOPSIS
SYNCUSER_CREATE_var=value... sync-accounts-createuser DESCRIPTION
sync-accounts-createuser is invoked by sync-accounts when sync-accounts is creating a local account. It must perform all of the tasks involved with local account creation except for the actual changes to the password, shadow and group data- bases. At the very minimum, it must create the new account's home directory (with appropriate permissions). The supplied sync-accounts-createuser script does exactly that. It may also suggest to sync-accounts modifications to the new account's passwd entry. INVOCATION
When sync-accounts-createuser is invoked, the passwd and group entries will not yet have been set up, so it may not rely on them. sync- accounts-createuser will not be supplied with any arguments. However, the following environment variables will be set, giving details about the account to be created: SYNCUSER_CREATE_USER SYNCUSER_CREATE_UID SYNCUSER_CREATE_GID SYNCUSER_CREATE_COMMENT SYNCUSER_CREATE_HOME SYNCUSER_CREATE_SHELL RESULTS
sync-accounts-createuser should usually produce no output. It can inhibit the creation of the user by outputting a single line not containing a colon; in this case, a diagnostic message will be written to sync-accounts's logfile, and the user will be skipped. Alternatively, it may write out an alternative password file entry, in which case sync-accounts will use the supplied data for the local passwd file instead of that from the remote host. The line should be in Sys-V passwd file format (regardless of localformat or remotefor- mat settings). The username field should be taken from SYNCUSER_CREATE_USER, and the password field should be x. EXIT STATUS
0 All went well, or we wrote a line without a colon to say that the account should not be created. any other There were serious problems and sync-accounts should bomb out immediately. FILES
None. ENVIRONMENT
See above. BUGS
The supplied sync-accounts-createuser does not check that it was not supplied with any arguments; nor does it check that the SYNCUSER_CRE- ATE_* variables are set, or have sensible values. AUTHOR
sync-accounts-createuser and this manpage were written by Ian Jackson <ian@chiark.greenend.org.uk>. They are Copyright 1999-2002 Ian Jack- son <ian@davenant.greenend.org.uk>. This manpage forms part of the sync-accounts package. sync-accounts-createuser and the sync-accounts package are free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3, or (at your option) any later version. This is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, consult the Free Software Foundation's website at www.fsf.org, or the GNU Project website at www.gnu.org. SEE ALSO
sync-accounts(8), sync-accounts(5), passwd(5) Greenend 14th July 2002 SYNC-ACCOUNTS-CREATEUSER(8)
All times are GMT -4. The time now is 03:20 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy