[37727] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Kerberos Authentication Support help

daemon@ATHENA.MIT.EDU (Todd Grayson)
Thu Oct 6 15:55:39 2016

MIME-Version: 1.0
In-Reply-To: <jlgwphlqnbu.fsf@thriss.redhat.com>
From: Todd Grayson <tgrayson@cloudera.com>
Date: Thu, 6 Oct 2016 13:54:58 -0600
Message-ID: <CALNT6MUcgqUmYFfRyJnxnbqdcWRcLyeoz9BXWMANP99XZMTsUw@mail.gmail.com>
To: Robbie Harwood <rharwood@redhat.com>
Cc: anilkumar.palahanumanthrao@wellsfargo.com,
        "kerberos@MIT.EDU" <kerberos@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

Anil,

This is not really "support" more than a community discussion list (for
your information).

Do a 'which kinit' to verify your proper path to the kinit command on the
distro you are on...

This works, but realize the path /opt/boksm/bin/kinit is not valid (by
default) on linux...

for example:

[12:50 root@admin1 ~] > which kinit
kinit is /usr/bin/kinit
[12:50 root@admin1 ~] > kdestroy
[12:50 root@admin1 ~] > klist
klist: No credentials cache found (ticket cache FILE:/tmp/krb5cc_0)
[12:50 root@admin1 ~] > echo "Password1" | /usr/bin/kinit
tgrayson@AD.EXAMPLE.COM
Password for tgrayson@AD.EXAMPLE.COM:
[12:50 root@admin1 ~] > klist -ef
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: tgrayson@AD.EXAMPLE.COM

Valid starting     Expires            Service principal
10/06/16 12:50:40  10/06/16 22:51:32  krbtgt/AD.EXAMPLE.COM@AD.EXAMPLE.COM
renew until 10/13/16 12:50:40, Flags: FRIA
Etype (skey, tkt): aes256-cts-hmac-sha1-96, aes256-cts-hmac-sha1-96

On Thu, Oct 6, 2016 at 1:39 PM, Robbie Harwood <rharwood@redhat.com> wrote:

> Anilkumar.Palahanumanthrao@wellsfargo.com writes:
>
> > Dear Support,
> >
> > We are using Kerberos Authentication in the past on AIX with the below
> command and it worked fine.
> > echo "password" | /opt/boksm/bin/kinit userid
> >
> > We recently migrated from AIX to Linux, and when we gave the above
> > commands,it is asking for password in interactive mode.
> >
> > userid 's Password:
> >
> > We would like to pass the password dynamically, please help.
>
> Is this MIT's krb5 or Heimdal's?  What version?
>
> ________________________________________________
> Kerberos mailing list           Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
>


-- 
Todd Grayson
Business Operations Manager
Customer Operations Engineering
Security SME
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post