[28420] in Kerberos
Need help on GSSFTP
daemon@ATHENA.MIT.EDU (tetsu.soh@nts.ricoh.co.jp)
Tue Sep 18 03:24:56 2007
In-Reply-To: <mailman.38530.1190098903.2903.kerberos@mit.edu>
To: kerberos@mit.edu
Message-ID: <OF1F6F946F.E87F8C4F-ON4925735A.0026A93D-4925735A.0028929E@nts.ricoh.co.jp>
From: tetsu.soh@nts.ricoh.co.jp
Date: Tue, 18 Sep 2007 16:24:33 +0900
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Hello everyone,
I am a newbie to Kerberos and also to Linux. So please forgive me for my
ignorance.
I met a problem when i try to use gssftp distributed with krb5-1.6.2.
I'm using ubuntu7.04, and I set up KDC and ftp server both on a same linux
box.
My problem is that I succeeded on authentication, but failed on
authorization.
Here is the system output:
Connected to ftp.test.com.
220 tetsu-ubuntu FTP server (Version 5.60) ready.
334 Using authentication type GSSAPI; ADAT must follow
GSSAPI accepted as authentication type
GSSAPI authentication succeeded
Name (ftp.test.com:tetsu):
530 GSSAPI user root/admin@TEST.COM is not authorized as tetsu; Access
denied.
Login failed.
I have no idea on how to configure where gssftp to authorize to.
I had setup a LDAP server and use it as back-end kerberos database.
However, I found
that it has little effect with the gssftp. Whether or not I setup the LDAP
server, always
got the same error message as shown above.
I did man ftpd and googled, but found little. So I hope I can get some
advice here.
Thanks in advance.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
