[Samba] Winbind, Kerberos, SSH and Single Sign On

Andreas Hauffe andreas.hauffe at tu-dresden.de
Thu Nov 2 10:29:43 UTC 2017


Hi,

a new hint. If I change the default_realm in krb5.conf to EXAMPLE.DE 
than the kerberized ssh is working for a user from example.de 
(user1 at EXAMPLE.DE) and not working for a user from 
subdom2.subdom1.example.de (testuser at SUBDOM2.SUBDOM1.EXAMPLE.DE)

So with the actuall configuration I'm able to use kerberized ssh for 
users from example.de or users from subdom2.subdom1.example.de but not both.

-- 
Viele Grüße
Andreas Hauffe
Leiter des Forschungsfeldes "Auslegungsmethoden für Luftfahrzeuge"

----------------------------------------------------------------------------------------------------
Technische Universität Dresden
Institut für Luft- und Raumfahrttechnik / Institute of Aerospace Engineering
Lehrstuhl für Luftfahrzeugtechnik / Chair of Aircraft Engineering

D-01062 Dresden
Germany

phone : +49 (351) 463 38496
fax :  +49 (351) 463 37263
mail : andreas.hauffe at tu-dresden.de
Website : http://tu-dresden.de/mw/ilr/lft
----------------------------------------------------------------------------------------------------
Do you know our free laminate analysis code eLamX²? If not, please visit the following web address:
http://www.elamx.de



Am 02.11.2017 um 09:56 schrieb Andreas Hauffe via samba:
> Hi,
>
> thanks for your hints. DNS, /etc/resolf.conf, /ets/hosts seem to be 
> correct. I'm able to do a kerberized ssh with a user from 
> subdom2.subdom1.example.de (testuser at SUBDOM2.SUBDOM1.EXAMPLE.DE) But 
> I'm not able to do the same with a user from example.de 
> (user1 at EXAMPLE.DE).
>
>
>


More information about the samba mailing list