[2024-feb-29] Sad news: Eric Layton aka Nocturnal Slacker aka vtel57 passed away on Feb 26th, shortly after hospitalization. He was one of our Wiki's most prominent admins. He will be missed.

Welcome to the Slackware Documentation Project

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
howtos:network_services:kerberizing_slackware_without_pam [2015/11/28 03:28 (UTC)] jamesaxlhowtos:network_services:kerberizing_slackware_without_pam [2024/01/28 19:35 (UTC)] (current) – Update original source. Arktur republished the canich.net guide (and Arktur is now offline) tcanich
Line 125: Line 125:
 $ kadmin -p krb5adminprinc/admin $ kadmin -p krb5adminprinc/admin
 </code> </code>
-=== The Client ===+==== The Client ===
 This procedure will result in a client capable of retrievving Kerberos tickets from a KDC and allow Kerberos principals to login at the console. Successful console login by a principal will generate tickets in the user's cache. Failed login by a principal (because the principal doesn't exist, or the wrong password was supplied) should fall through to local authentications (/etc/shadow). Note: the principal must be associated with an account on the system, either in the local passwd database or via a network system such as NIS or LDAP. This procedure will result in a client capable of retrievving Kerberos tickets from a KDC and allow Kerberos principals to login at the console. Successful console login by a principal will generate tickets in the user's cache. Failed login by a principal (because the principal doesn't exist, or the wrong password was supplied) should fall through to local authentications (/etc/shadow). Note: the principal must be associated with an account on the system, either in the local passwd database or via a network system such as NIS or LDAP.
  
-**1.** Install krb5 package and krb5-appl package.+**1.** Install krb5 always http://slackbuilds.org/repository/14.1/network/krb5/ :-).
 **2.** Setup /etc/krb5.conf: **2.** Setup /etc/krb5.conf:
 **krb5.conf** **krb5.conf**
Line 157: Line 158:
 </code> </code>
 **4.** Add host principal, and extract host principal to /etc/krb5.keytab using kadmin and admin principal: **4.** Add host principal, and extract host principal to /etc/krb5.keytab using kadmin and admin principal:
-<ode># kadmin -p krb5adminprinc/admin+<code># kadmin -p krb5adminprinc/admin
 kadmin: ank -randkey host/fully.qualified.domain.name kadmin: ank -randkey host/fully.qualified.domain.name
 kadmin: xst -k /etc/krb5.keytab host/fully.qualified.domain.name kadmin: xst -k /etc/krb5.keytab host/fully.qualified.domain.name
Line 164: Line 165:
  ====== Sources ======  ====== Sources ======
 <!-- If you are copying information from another source, then specify that source --> <!-- If you are copying information from another source, then specify that source -->
-<!-- * Original source: [[http://some.website.org/some/page.html]] -->+* Original source: [[https://www.canich.net/slackware/krb5.html]]
 <!-- Authors are allowed to give credit to themselves! --> <!-- Authors are allowed to give credit to themselves! -->
 <!-- * Originally written by [[wiki:user:xxx | User X]] --> <!-- * Originally written by [[wiki:user:xxx | User X]] -->
-<!-- * Contributions by [[wiki:user:yyy | User Y]] -->+* Contributions by [[wiki:user:jamesaxl | User jamesaxl]]
  
 <!-- Please do not modify anything below, except adding new tags.--> <!-- Please do not modify anything below, except adding new tags.-->
 <!-- You must remove the tag-word "template" below before saving your new page --> <!-- You must remove the tag-word "template" below before saving your new page -->
-{{tag>howtos template}}+{{tag>howtos network_services kerberizing_slackware_without_pam}}
 howtos:network_services:kerberizing_slackware_without_pam ()