add howtos to wiki
simo
idra at samba.org
Fri Oct 5 10:04:16 MDT 2012
On Fri, 2012-10-05 at 17:13 +0200, Daniele Dario wrote:
> Hi samba team,
> after many headaches I finally got ssh working with samba4 kerberos
> authentication.
>
> Would it be useful for other to write the (2) simple lines to gain it on
> a page of the wiki?
>
> in /etc/ssh/sshd_config
> ...
> # Kerberos options
> KerberosAuthentication yes
> KerberosOrLocalPasswd yes
> KerberosTicketCleanup yes
You probably do not want the above ones set to yes, you want to use only
GSSAPI for SSO and PAM for password based auth.
Simo.
> # GSSAPI options
> GSSAPIAuthentication yes
> GSSAPIKeyExchange yes
> # this seems to be the trick
> GSSAPIStrictAcceptorCheck no
> GSSAPICleanupCredentials yes
>
> Another note:
> there is a Samba4/Winbind howto which can't be reached from the main
> page of the wiki (at least I was not able to find it). Would it be
> possible to add it.
>
> I created an account but I'm not in the Administrators list so I can't
> cange/add anything.
>
> Regards,
> Daniele.
--
Simo Sorce
Samba Team GPL Compliance Officer <simo at samba.org>
Principal Software Engineer at Red Hat, Inc. <simo at redhat.com>
More information about the samba-technical
mailing list