Secondary Authentication of UNIX . Post: 302962413

9 More Discussions You Might Find Interesting

1. Windows & DOS: Issues & Discussions

Windows AD for Unix authentication

I am not an expert in Unix at all. My knowledge of Unix is average. We have a couple of Unix servers, Solaris and Linux, which run mostly web servers, and Oracle databases. Currently users have multiple user IDs for Unix and AD applications. Is it possible to make use of the Windows Active...

2. Shell Programming and Scripting

List ALL users in a Unix Group (Primary and Secondary)

Is there a command or better combination of cmds that will give me the list of Unix users in a particular Unix group whether their primary group is that group in question (information stored in /etc/passwd) or they are in a secondary group (information stored in /etc/group). So far all I got...

3. Solaris

bypass password authentication for sftp in unix

I am using solaris unix 8.2 version. I want to bypass password authentication for sftp. Can you please give some ideas on this. thanks.Regards.

4. Web Development

Ssh authentication from .NET webpage to UNIX is not working

My .NET website invokes a perl script to perform GIT operations on Gerrit server running UBuntu. In the perl script I connect using passwordless authentication to Gerrit server as below: system ( "ssh gitadmin@gerritserver.com 'cd /xyz && git clone xxx' "); I verified that ssh authentication...

5. AIX

UNIX authentication strategy - LDAP or AD

We are looking at using Tivoli Directory Server (LDAP) or Active Directory 2003 for authentication. I wanted to get some feedback from the community. Our goal is to do it the simplest, easiest, and cheapest way that allows for centralized user authentication. We are mainly an AIX environment with...

6. UNIX and Linux Applications

UNIX and Linux authentication middleware or tools

Hi, We are looking for UNIX and Linux authentication middleware/tools which can replace our existing RSA SecurID - Two-Factor Authentication. Any suggestions or recommendations. Thanks, Gabar

7. UNIX for Dummies Questions & Answers

UNIX Logon/Authentication Types

Hi, I was wondering if someone may be able to help me with finding out the different *nix logon types. The different logon types for a Successful Logon event type in Windows (4624) is well documented both on the M$ site and also on many tech related sites, listing the different logon types...

8. Cybersecurity

Looking for suggestion on authentication method for UNIX/Windows

Hello, We have mid level infrastructure of all on-premises servers. All windows servers are getting authenticated by Microsoft Active Directory Services, half Unix (Solaris+Linux) servers are getting authentication by NIS and other half by LDAP. We have plans to migrate from NIS to LDAP, so...

9. Cybersecurity

Two Factor Authentication � Best for the UNIX/Linux Server Security

The UNIX/Linux server security is challenging because these servers are at a risk of getting compromised at any point of time by the attackers. In today's enterprise environment, the UNIX and Linux servers are growing popular. With their increased popularity, these servers have become the primary...

LEARN ABOUT DEBIAN

ka-forwarder

KA-FORWARDER(8) 					       AFS Command Reference						   KA-FORWARDER(8)

NAME

       ka-forwarder - Forward AFS Authentication Server requests to another server

SYNOPSIS

       ka-forwarder [-p <port>] <server>[/<port>] [...]

DESCRIPTION

       ka-forwarder listens for requests for an AFS Authentication Server and forwards them to a remove fakeka server.	fakeka is a server that
       answers AFS Authentication Server protocol requests using a regular Kerberos KDC and is provided with some Kerberos 5 implementations.
       fakeka has to run on the same host as the Kerberos KDC, however, and AFS clients send all native AFS authentication requests to the AFS
       database servers.  If you don't want to run your Kerberos KDCs and your AFS database servers on the same host, run ka-forwarder on the AFS
       database servers and point it to fakeka running on the Kerberos KDCs.

       ka-forwarder takes one or more servers to which to forward the requests.  The default port on the remote server to which to forward the
       command is 7004, but a different port can be specified by following the server name with a slash ("/") and the port number.  If multiple
       servers are given, ka-forwarder will send queries to each server in turn in a round-robin fashion.

CAUTIONS

       Due to the way that ka-forwarder distinguishes from client requests and server responses, any messages from one of the servers to which ka-
       forwarder is forwarding will be considered a reply rather than a command and will not be forwarded.  This means that the servers running
       fakeka will not be able to use native AFS authentication requests and rely on ka-forwarder to send the requests to the right server.

       ka-forwarder does not background itself.  It should either be run in the background via the shell, or run via the Basic OverSeer Server
       (see bosserver(8)).

OPTIONS

       -p <port>
	   By default, ka-forwarder listens to the standard AFS Authentication Server port (7004).  To listen to a different port, specify it with
	   the -p option.

EXAMPLES

       Forward AFS Authentication Server requests to the fakeka servers on kdc1.example.com and kdc2.example.com:

	   % ka-forwarder kdc1.example.com kdc2.example.com &

       Note the "&" to tell the shell to run this command in the background.

PRIVILEGE REQUIRED

       ka-forwarder only has to listen to port 7004 and therefore does not require any special privileges unless a privileged port is specified
       with the -p option.

SEE ALSO

       bosserver(8), fakeka(8), kaserver(8)

COPYRIGHT

       Copyright 2006 Russ Allbery <rra@stanford.edu>

       This documentation is covered by the IBM Public License Version 1.0.  This man page was written by Russ Allbery for OpenAFS.

OpenAFS 							    2012-03-26							   KA-FORWARDER(8)