[38531] in Kerberos

home help back first fref pref prev next nref lref last post

AW: Kerberos Linux to AD problem

daemon@ATHENA.MIT.EDU (Matthias Brenner)
Tue May 7 05:13:32 2019

From: Matthias Brenner <matthias.brenner@blue-yonder.com>
To: Rob A <docsmooth2486@gmail.com>
Date: Tue, 7 May 2019 09:13:02 +0000
Message-ID: <11d6c810416140d8b0e551eefc517636@ex2013-2.phi-tps.local>
In-Reply-To: <CAMH5BinQh_F+MyDGWD9u3UcTv67dPr8kdUYBqB1kMXW2LOveoQ@mail.gmail.com>
Content-Language: de-DE
MIME-Version: 1.0
Cc: "kerberos@mit.edu" <kerberos@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

Hi Rob,

thanks for your answer.

> First, make sure you disabled mdns3 or moved it down the list in your nsswitch, so that the .local domain will work properly.
> This is just good hygiene.

Was already disabled. Thanks for that hint.

> Second, just log in with your AD credentials with sssd and type klist. It should show the right credentials. Kinit should not be necessary.

Tested and ok.

> Third, try smbclient -k //ka-dc01.example.local/c\$

Tested and ok, too.

> If that works, then Kerberos is set up right. I'm not sure PS Core supports Kerberos proudly from Linux yet (they didn't 3 months ago),
> check github.

I agree. Maybe it's simply that PS Core doesn't support Kerberos at the moment.


Thank you very much for your help!


Regards

Matthias
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post