Kerberos

Aus xinux.net
Zur Navigation springen Zur Suche springen

important

client and servers should have the correct time and should resolv A and PTR record on dns

ssh-server

modification /etc/ssh/sshd_config

# GSSAPI options
GSSAPIAuthentication yes
GSSAPICleanupCredentials yes
GSSAPIKeyExchange yes
GSSAPIStoreCredentialsOnRekey yes

generate a keytab-file

net ads keytab create -U administrator

ssh-client

modification /etc/ssh/ssh_config

GSSAPIAuthentication yes
GSSAPIDelegateCredentials yes
GSSAPIKeyExchange yes
GSSAPIRenewalForcesRekey yes
GSSAPITrustDNS yes
Abgerufen von „https://xinux.net/index.php?title=Kerberos&oldid=4642“