Login or Register to Ask a Question and Join Our Community

Sponsored Content
Full Discussion: Authenticating with SSSD / Kerberos against Windows Server 2012 R2
Top Forums UNIX for Advanced & Expert Users Authenticating with SSSD / Kerberos against Windows Server 2012 R2 Post 302953790 by Devyn on Tuesday 1st of September 2015 12:25:26 PM
Old 09-01-2015
Authenticating with SSSD / Kerberos against Windows Server 2012 R2
I'm authenticating with SSSD / Kerberos against Windows Server 2012 R2. I've setup credentails delegation using these options:

Code:
Host *
  GSSAPIAuthentication yes
  GSSAPIDelegateCredentials yes
  GSSAPITrustDns yes

For both client/server but no luck. I've read online that I need to run ADSIEdit.msi to edit the user flags in Windows Server 2012 R2 to enable a delegation tab, which I've done, but no luck setting the delegation parameters. Thinking my issue is on the Windows Server 2012 with the setting I put for SPN (servicePrincipalName) but not 100%. 3

My question is does Linux SSSD / Kerberos care about the Windows Server 2012 R2 delegation settings and what should I set the servicePrincipalName too in Windows so my SSSD / Kerberos implementation will work?

What should I look for in the log files to determine if the credentials deletation is working or not working? I searched for *deleg* but nothing comes up.

What do I need to look for in the log files to determine where the delegation is breaking and hence not working?

Thanks,
Dev
Last edited by Don Cragun; 09-01-2015 at 05:17 PM.. Reason: Add CODE and ICODE tags. Delete extraneous BOLD tags.
 

10 More Discussions You Might Find Interesting

1. AIX

Users not authenticating via Kerberos on MS AD

I have AD (active directory) user, "asdf", created and a matching local AIX user name. Using "kinit", I can successfully authenticate it against the MS AD but when they I try to login via SSH with the same user name, it doesn't work. How can I get AIX to allow kerberos authentication as a valid... (1 Reply)
Discussion started by: kah00na
1 Replies

2. Shell Programming and Scripting

Unix shell script to Copy files from one Windows server to another Windows server.

Can anybody please help me on how to code for the below requirement: I need to write a shell script (on different unix server) to copy files from multiple folders (ex. BRN-000001) from one windows server (\\boldls-mwe-dev4)to a different windows server(\\rrwin-ewhd04.ecomad.int). This shell... (4 Replies)
Discussion started by: SravsJaya
4 Replies

3. Shell Programming and Scripting

gawk convert 2012-Jun-13 to 2012-06-13

I have a value in a file i am processing that has a date like "2012-Jun-13" how can I convert a date like that 2012-06-13? Am I stuck building an array of three digit months and corresponding numbers and running through the logic of figuring out the number?? or can I convert this with... (1 Reply)
Discussion started by: trey85stang
1 Replies

4. Shell Programming and Scripting

Date conversion help from dd/mm/yyyy to dd/Mon/yyyy i.e. 28/10/2012 to 28/Oct/2012

Hi I have a problem with Date format in my code. 1st I am trying to convert today's date to yesterday's using YESTERDAY3=`perl -e '@y=localtime(time()-86400); printf "%04d/%02d/%02d",$y+1900,$y+1,$y;$y;'` And once it is done I am trying to using the yesterday date in a grep command to... (3 Replies)
Discussion started by: nithinankam
3 Replies

5. What is on Your Mind?

Place your bits - 2012 FIFA Ballon d'Or and 2012 FIFA World Coach of the Year

I have added two new sports events. The FIFA Ballon d'Or is an association football award given annually to the player who is considered to have performed the best in the previous season. It is awarded based on votes by coaches and captains of international teams, as well as journalists from... (0 Replies)
Discussion started by: ni2
0 Replies

6. Red Hat

Not authenticating in apache server site for a folder

hi , Im configuring web site with authencation to a folder but the authentication is not happening. below is the conf file of /etc/httpd/conf/httpd.conf <VirtualHost 192.168.1.4:80> DocumentRoot /var/www/html/ ServerName redhatclient.example.com <directory... (0 Replies)
Discussion started by: redhatlbug
0 Replies

7. AIX

How can we share a AIX drive on to Windows 2012 server?

Hi, How can we share a AIX drive on to Windows 2012 server. or vise versa. Note: Not using NFS/CIFS/samba. (*we are not able to use samba/NFS/CIFS for some reason) Requirement: How to have real time file sharing over the network between Windows and UNIX Do you guys have any ... (4 Replies)
Discussion started by: System Admin 77
4 Replies

8. AIX

Samba 3.6.22 on AIX 7.1 with Windows AD (Kerberos and winbind)

Hi all, I have installed samba 3.6.22 on AIX 7.1 and join a windows AD with success. All seem to work fine, I have configured smb.conf, methods.cfg, kerberos, user .... the following command work fine wbinfo -u, wbinfo -g, wbinfo -i, wbinfo -s, wbinfo -S, lsuser, id... The unique... (20 Replies)
Discussion started by: PhilippeA
20 Replies

9. Shell Programming and Scripting

List line count of multiple files in windows server 2012

how to find out line count ( wc -l ) for multiple fines in windows cmd the command which i a using to find line count for single file is type sec0001.txt | find /c /v "" but how to use it for multiple files to get output filewise as if this command is run like type sec*.txt |... (2 Replies)
Discussion started by: sagar_1986
2 Replies

10. Solaris

Authenticating UNIX (Solaris 11) to Windows 2012R2 / Active Directory

Gentleman, i am trying to setup Authentication for my Solaris 11 Server through Active Directory (Server 2012 R2). At least some things are already working, for example a getent passwd mydomainuser and ldapsearch command comes back with a correct result. So not everything i did was wrong. ... (1 Reply)
Discussion started by: bahnhasser83
1 Replies

LEARN ABOUT CENTOS

ipa-client-automount

ipa-client-automount(1) 					 IPA Manual Pages					   ipa-client-automount(1)

NAME

       ipa-client-automount - Configure automount and NFS for IPA

SYNOPSIS

       ipa-client-automount [OPTION]... <location>

DESCRIPTION

       Configures automount for IPA.

       The automount configuration consists of three files:

       o      /etc/nsswitch.conf

       o      /etc/sysconfig/autofs

       o      /etc/autofs_ldap_auth.conf

       By  default  this will use DNS discovery to attempt to determine the IPA server(s) to use. If IPA servers are discovered then the automount
       client will be configured to use DNS discovery.

       If DNS discovery fails or a specific server is desired, use the --server option.

       The default automount location is named default. To specify a different one use the --location option.

       The IPA client must already be configured in order to configure automount. The IPA client is configured as part of a server installation.

       There are two ways to configure automount. The default is to use sssd to manage the automount maps. Alternatively autofs can configured	to
       bind to LDAP over GSSAPI and authenticate using the machine's host principal.

       The nsswitch automount service is configured to use either sss or ldap and files depending on whether SSSD is configured or not.

       NFSv4 is also configured. The rpc.gssd and rpc.idmapd are started on clients to support Kerberos-secured mounts.

OPTIONS

       --server=SERVER Set the IPA server to connect to

       --location=LOCATION
	      Automount location

       -S, --no-sssd
	      Do not configure the client to use SSSD for automount

       -d, --debug
	      Print debugging information to stdout

       -U, --unattended
	      Unattended installation. The user will not be prompted

       --uninstall
	      Restore the automount configuration files

FILES

       Files that will be always be configured:

	      /etc/nsswitch.conf

       Files that will be configured when SSSD is the automount client (default):

	      /etc/sssd/sssd.conf

       Files that will be configured when using the ldap automount client:

	      /etc/sysconfig/autofs

	      /etc/autofs_ldap_auth.conf

EXIT STATUS

       0 if the installation was successful

       1 if an error occurred

IPA
								    May 25 2012 					   ipa-client-automount(1)
All times are GMT -4. The time now is 03:00 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy