[Samba] Trouble in ssh into Windows machines in the Windows/Samba Domain

[L.P.H. van Belle]

All i added for some users was this in sshd_config 

Match User SomeUser
    AuthenticationMethods publickey,password

The rest, same as shown. 

if it does work, 
delegation set on the computer? 
or maybe these also in krb5.conf 

    forwardable = true
    proxiable = true 

and if you restriced the userhome dirs for root/admins
add : ignore_k5login = true  in krb5.conf 


Greetz, 

Louis


> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Rowland penny via
> samba
> Verzonden: maandag 12 april 2021 10:05
> Aan: sambalist
> Onderwerp: Re: [Samba] Trouble in ssh into Windows machines in the
> Windows/Samba Domain
> 
> On 12/04/2021 08:51, Nicola Mingotti wrote:
> >
> > Hi Rowland,
> >
> > the Dos file fomat is an idea. Still I have problems.
> >
> > But I think from now on i must fight on this corner on my own, you
> > can't reproduce
> > the issue so it is not reasonable to ask you to spend time on this.
> >
> > If I discover how to make it work I will report here for the others.
> >
> > Instead, if you have the time, please, could check if you are able to
> > make work the Kerberos auth ?
> > Even between Linuxes, just proof of concept to see it is possible.
> 
> 
> I know that between Linux computers, ssh works using a password,
> publickey and kerberos. I can make the first two work for ssh to Windows
> from Linux, I cannot get kerberos working between Linux and Windows and
> I believe this is because the Windows ssh doesn't have GSSAPI.
> 
> Rowland
> 
> 
> 
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba