add howtos to wiki

simo idra at samba.org
Fri Oct 5 10:04:16 MDT 2012


On Fri, 2012-10-05 at 17:13 +0200, Daniele Dario wrote:
> Hi samba team,
> after many headaches I finally got ssh working with samba4 kerberos
> authentication.
> 
> Would it be useful for other to write the (2) simple lines to gain it on
> a page of the wiki?
> 
> in /etc/ssh/sshd_config
> ...
> # Kerberos options
> KerberosAuthentication yes
> KerberosOrLocalPasswd yes
> KerberosTicketCleanup yes

You probably do not want the above ones set to yes, you want to use only
GSSAPI for SSO and PAM for password based auth.

Simo.

> # GSSAPI options
> GSSAPIAuthentication yes
> GSSAPIKeyExchange yes
> # this seems to be the trick
> GSSAPIStrictAcceptorCheck no
> GSSAPICleanupCredentials yes
> 
> Another note:
> there is a Samba4/Winbind howto which can't be reached from the main
> page of the wiki (at least I was not able to find it). Would it be
> possible to add it.
> 
> I created an account but I'm not in the Administrators list so I can't
> cange/add anything.
> 
> Regards,
> Daniele.


-- 
Simo Sorce
Samba Team GPL Compliance Officer <simo at samba.org>
Principal Software Engineer at Red Hat, Inc. <simo at redhat.com>



More information about the samba-technical mailing list