[24849] in Kerberos

home help back first fref pref prev next nref lref last post

SSH and Kerberos in Solaris 9

daemon@ATHENA.MIT.EDU (henrik)
Wed Oct 26 14:59:23 2005

From: "henrik" <henrik@stat.tamu.edu>
Date: 26 Oct 2005 09:06:09 -0700
Message-ID: <1130342769.481455.11220@z14g2000cwz.googlegroups.com>
To: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu


    Hello
I have kerberos working on a Solaris 9 box in the sense that if I type:

   kinit henrik

the system authenticates the password without error. I need to get ssh
to accept the kerberos authentication. In Linux it was easy to do, but
I am having trouble configuring the Solaris /etc/pam.conf file to make
this work. Uncommenting this section:

#
# Support for Kerberos V5 authentication (uncomment to use Kerberos)
#
rlogin		auth optional		pam_krb5.so.1 try_first_pass
login		auth optional		pam_krb5.so.1 try_first_pass
other		auth optional		pam_krb5.so.1 try_first_pass
cron		account optional 	pam_krb5.so.1
other		account optional 	pam_krb5.so.1
other		session optional 	pam_krb5.so.1
other		password optional 	pam_krb5.so.1 try_first_pass

does not make ssh accept kerberos passwords for ssh logins. As a test I
enabled telnet and with telnet things fail as well:

login: henrik
Password:
Enter Kerberos password for henrik:
authentication failed:  Unknown code 2

On the login prompt the kerberos password is accepted, but then it
requests it again and the same password fails. I really am not
interested in getting telnet to work, it was just for diagnosis I tried
it.

Any help would be appreciated.
  
    - Henrik

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post