My Notepad
Friday, May 25, 2007
Auth Linux against Active Directory
A good tutorial at http://www.windowsnetworking.com/articles_tutorials/Authenticating-Linux-Active-Directory.html
http://www.alittletooquiet.net/atq/articles/kerberos-on-ubuntu?PHPSESSID=4b1d933546f8ecc448952cd30ce139ec
If only want to enable kerberos authentication on Linux, two things need to be done are krb5 configuration and pam configuration.
krb5 config is done though /etc/krb5.conf. PAM is configured though files under /etc/pam.d.
in FC6, PAM configuration can be done as easy as one click if using GUI tool system-config-authentication.
This program will automatically modify /etc/pam.d/system-auth to add following line to it,
auth sufficient /lib/security/pam_krb5.so use_first_pass
The file system-auth is by default already included by other application pam files such as login, gdm, sshd. etc, therefore these applications will now accept kerberos login method.
Although haven't test yet, the configuration of LDAP and other methods should be similar.
http://www.alittletooquiet.net/atq/articles/kerberos-on-ubuntu?PHPSESSID=4b1d933546f8ecc448952cd30ce139ec
If only want to enable kerberos authentication on Linux, two things need to be done are krb5 configuration and pam configuration.
krb5 config is done though /etc/krb5.conf. PAM is configured though files under /etc/pam.d.
in FC6, PAM configuration can be done as easy as one click if using GUI tool system-config-authentication.
This program will automatically modify /etc/pam.d/system-auth to add following line to it,
auth sufficient /lib/security/pam_krb5.so use_first_pass
The file system-auth is by default already included by other application pam files such as login, gdm, sshd. etc, therefore these applications will now accept kerberos login method.
Although haven't test yet, the configuration of LDAP and other methods should be similar.
posted by Synew # 4:04 AM 
Archives
December 2005 January 2006 February 2006 April 2006 May 2006 June 2006 July 2006 November 2006 February 2007 May 2007 June 2007 November 2007 February 2008 March 2008 April 2008 August 2008 December 2008 March 2009 April 2009 May 2009 June 2009 October 2009 November 2009 December 2009 May 2013
