- This topic has 3 replies, 1 voice, and was last updated 16 years, 12 months ago by
.
-
Posts
-
Hi all!
I’m having a little problem with my home setup, and was wondering if anyone had an idea what to do.
I’ve got a Linux server set up with OpenLDAP and Kerberos. Basic authentification works fine, but I’m having problems with users that have authAutority set to ;Kerberosv5;;user@REALM.TLD;REALM.TLD.
In the ldap structure, KerberosClient is set up and good. My 10.6 SL client machine can authenticate the kerberized users, but not my 10.5 and 10.4 machines.
Packet sniffing shows absolutely no differences between 10.4, 10.5 and 10.6.
kinit user asks for password, the ticket is granted.
I can’t seam to find what, except the OS version, is different between my 3 Macs that makes it work on 10.6 and not others. Anybody can help me with that?
Well.. solved the 10.4 machine, but not the 10.5 one 🙁
I see CLIENT_NOT_FOUND: @MENZONET.ORG for krbtgt/MENZONET.ORG@MENZONET.ORG, Client not found in Kerberos database in my logs instead of videorecorder@MENZONET.ORG for krbtgt/MENZONET.ORG@MENZONET.ORG.
It seams related to authAuthority… or maybe something else. Why would the mac to try to authenticate without the username in the krb principal?
- You must be logged in to reply to this topic.