[22428] in Kerberos
Re: Kerberos Windows Client sign
daemon@ATHENA.MIT.EDU (Fredrik Tolf)
Fri Sep 10 17:53:45 2004
From: Fredrik Tolf <fredrik@dolda2000.com>
Date: Fri, 10 Sep 2004 02:20:09 +0200
Message-ID: <1094775609.3625.6.camel@pc7.dolda2000.com>
To: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
On Thu, 2004-09-09 at 17:24 +0000, Luis Daniel Lucio Quiroz wrote:
> Helo All,
>
> I was wondering if there is away to make kerberos auth automatic. The fact is
> that I working on making a NT4 (samba) like domain work most closely like a
> 2k-alike domain (I'm interesting on Kerberos and single-singon feature). On
> PDC all services are already kerberized, using pam or native support.
>
> When a client sign on I can catch its password, so I would know if there is a
> way to use kinit command with out prompint,
>
> I have tried: echo passwor | kinit user and
> kinit user < pass.txt
If it is passwordless autologin that you seek, you might might want to
create an extra principal such as user/autologin instead. Then, extract
that principal into a keytab on the computer in question:
kadmin -q "ktadd -k /path/to/the/users/keytab user/autologin"
Then, to initialize the ccache, run kinit like this:
kinit -k -t /path/to/the/users/keytab user/autologin
That way, you won't have to save the user's password in plaintext.
Admittedly, this is how it would be done on Linux/UNIX with the MIT
implementation. I have no idea if KFW works the same...
Fredrik Tolf
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
