CentOS 5 Networking :: Kerberos Authentication Broken After Upgrade To 5.5?
May 18, 2010
I had a working client installation with CentOS 5.4, using kerberos and PAM to authenticate. After an upgrade to 5.5, logins for users are no longer possible. Instead I get this:
/var/log/messages: gdm: Couldn't set acct. mgmt for <user> /var/log/secure: gdm: pam_krb5: authentication fails for '<user>': (<user@domain>): Authentication failure (Cannot read password) gdm: pam_krb5: account checks fail for '<user>': unknown reason -1765328254 (Cannot read password) gdm: pam:krb5: User not known to the underlying authentication module (Client not found in Kerberos database) "kinit <user>" still works as expected, and <user> has no problems logging in from other types of clients. Something kerberos-related apparently broke in CentOS 5.5,
View 2 Replies
ADVERTISEMENT
Apr 15, 2009
I've configured kerberos authentication on my centos 5.2 box. When I kinit with a username in AD and not on the centos box, I get a TGT. However, I cannot log into the centos box as any of the AD users. This is probably a stupid question but do I also need to create the account's on the centos box that I have in AD? If so, does that mean i can then use pam to authenticate users on my cyrus imap process running on the centos box?
View 2 Replies
View Related
Feb 25, 2011
I have the following version of centos,kerbose and samba (Samba version 3.0.33-3.29.el5_5.1, krb5-libs-1.6.1-36.el5_5.5 , krb5-workstation-1.6.1-36.el5_5.5 , centos-release-5-5.el5.centos) i have configured it and qhw i givit give me the following error Failed to set password for machine account NT_STATUS_ACCESS_DENIED) Failed to join domain: Access denied
[Code]...
View 10 Replies
View Related
Apr 14, 2010
So I was trying to configure my CUPS server and checked the box marked "Use Kerberos Authentication." Now, I cannot change anything and get an unauthorized error every time I try. How can I remove Kerberos? I have access to the local computer as root and can use sudo.
View 2 Replies
View Related
May 20, 2010
I have a number of CentOS 5.4 machines that use kerberos to authenticate. This works fine. However, after upgrading one of them to CentOS 5.5 it is no longer possible to log in.
In 5.4, I get this in the log:
> called to authenticate 'hans', realm 'MYREALM'
> authenticating 'hans@MYREALM'
> not using an entered password for 'hans', allowing libkrb5 to prompt for more
> authenticating 'hans@MYREALM' to 'krbtgt/MYREALM@MYREALM'
[code]....
Note the absence of the line where libkrb5 asks for a password. Running "kinit hans" on the machine (as root, who can log in) works as it should, so I don't think anything is wrong with kerberos as such (as I did yesterday, in [URL]. Clients still running 5.4 have no problems, so the problem was introduced in 5.5.
View 1 Replies
View Related
Jun 15, 2011
I am looking for some links to configure kerberos authentication for ssh.I did tried google-ing it, but could not found any good link to go ahead with it.
View 1 Replies
View Related
Jun 16, 2011
Pretty much as described in the thread title. I'm running RHEL6 on both the server and the client.I followed Red Hat's own instructions to set the kdc upI have a user called krb, that has been added to the KDC and I can get a ticket from the KDC, by using
Code:
kinit -p krb
If I then try to log in to the KDC, from the KDC, with
[code]...
View 4 Replies
View Related
Sep 9, 2010
I recently upgraded my video card from a GeForce4 MX 440 AGP 8X to a GeForce FX 5500 AGP 8X. After that my 1360x768 monitor was stuck on a 1024x768 resolution. I ran system-config-display and under Hardware tab I changed the monitor setting from "Generic LCD Screen" to "1360x768 LCD Screen" with the acknowledgment that /etc/X11/xorg.conf file was been modified. After reboot the boot process stuck on:tarting kojid: Kerberos authentication failed. "Resource temporary unavailable" (11) [FAILED]I tried that with both 2.6.34.6-54 and 2.6.34.6-47 kernels available on my system.I use the latest KDE version available for Fedora.
View 1 Replies
View Related
Oct 14, 2010
I have a samba server for company file shares but we do not use domain services or active directory service. Each workstation is its own standalone system. (And we want to keep it this way.) I would like to have some centralized authentication though, and it looks like Kerberos will provide that. After a lot of searching though, I can't find any instructions for setting up samba to authenticate users using kerberos without an ADS (active directory service) or domain. Is this possible?
View 1 Replies
View Related
Jun 3, 2010
I have installed keberos on my suse machine, but after installation now I am not able to login in it even with the root password. I search over the internet but could not find the solution. What to do now and how to configure Kerberos on a local machine with only local users authentication. I mean client and server both are on the same machine.
View 2 Replies
View Related
Jun 8, 2011
I have set up my KDC and telnet in the same server.
I am trying to telnet from a local PC . This is the output I am getting ..
[sudip@kdcclient root]$ telnet -a -F -x kdc
Trying 192.168.1.3...
Connected to kdc.example.local (192.168.1.3).
Escape character is '^]'.
[Code]....
So why it is asking for password ? What I am missing here ?
View 3 Replies
View Related
Apr 9, 2009
After upgrading to CentOS 5.3 my sendmail will no longer deliver messages using a program in my /etc/smrsh. It fails with the message "unknown mailer error 1". This program was working perfectly before I did the upgrade using yum. Here is the list of packages that were upgraded. Does anything jump out as being the source of the issue? I don't believe that sendmail itself was upgraded:
Packages Installed:
dbus-libs - 1.1.2-12.el5.x86_64
libselinux-utils - 1.33.4-5.1.el5.x86_64
Packages Updated:
initscripts - 8.45.25-1.el5.centos.x86_64
[Code]....
View 3 Replies
View Related
Jul 18, 2009
I need to downgrade glibc due to a broken kernel after a libc6 upgrade attempt. See:[URL]..Especially with the reduced capabilities I have right now (few if any programs are working), how might I go about downgrading glibc to 2.6?
View 1 Replies
View Related
Oct 20, 2009
I recently upgraded my x86_64 system from FC8-FC10 using Pre-Upgrade, and here I got some help fixing all the package conflicts that resulted. Following the first reboot after this massive package update, it appears DNS doesn't work in some apps.
I could ping www.yahoo.com, and nslookup www.yahoo.com resolved the name, but firefox and links couldn't. Typing the ip addr that nslookup gives for www.yahoo.com works fine in both firefox and links. Something's obviously wrong with DNS.
I found a workaround for Firefox which is to browse to about:config and set network.dns.disableipv6 = true. Firefox started resolving names after that.
But then I noticed yum is DNS incapable as well. I don't know how to fix it. Here's what I get:
Code:
[~]$ sudo yum update
Loaded plugins: allowdowngrade, refresh-packagekit
http://linuxdownload.adobe.com/linux/i386/repodata/repomd.xml: [Errno 4] IOError: <urlopen error (-2, 'Name or service not known')>
Trying other mirror.
[Code]....
Does anyone have any additional info on workarounds or fixes for this DNS problem?
The machine in question has a static ip addr, and I have static nameserver addrs in /etc/resolv.conf, corresponding to the static settings provided by my isp.
View 14 Replies
View Related
May 10, 2010
I have a thinkpad using the iwl3945 driver (Intel(R) PRO/Wireless 3945ABG/BG Network Connection driver for Linux, 1.2.26ks).
This worked flawless until I upgraded to 10.04. Now after a while my connection drops. Syslog is appended.
May 10 20:16:04 gimli NetworkManager: <info> Activation (wlan0) starting connection 'Auto my-network'
May 10 20:16:04 gimli NetworkManager: <info> (wlan0): device state change: 3 -> 4 (reason 0)
[Code].....
View 1 Replies
View Related
Jun 9, 2010
I recently upgraded Ubuntu 9.10 to 10.04 and my wireless stopped working. It can detect that there are networks around, what their signal strength is, and then try to connect to one, but it just keeps connecting. After around 5 minutes, this stops and nm-applet says no network connection.
After I try to connect, dmesg is spammed with hundreds of the same message. I can not post these here, as I am writing from a different computer and I have no internet access from my main computer.Also, there is nothing in interfaces.conf other than lo. For some reason, my card is referred to as both wlan0 and wmaster0, with this changing depending upon where I look.Most interesting of all is that, even after I reinstalled 9.10, wireless is still broken, even though it wasn't before. It also used to work under liveCD.
View 1 Replies
View Related
Jul 13, 2010
I have LDAP server but I'm not admin. When I type: ldapsearch -x -b "ou=2007,o=faculty" "cn=7username"
View 11 Replies
View Related
Mar 10, 2009
I have an NIS server that is working well, and I want to use Kerberos to improve the overall security.I have already installed Kerberos client and server on two machines respectively.Currently the NIS server, Kerberos server, and KDC are running on the same box, and every box is in the same private network.I am having trouble logging in using the user account defined in Kerberos database. Here's /etc/krb5.conf on the client side:
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
[code].....
View 1 Replies
View Related
Sep 6, 2010
I trying to set up a LDAP server using openLDAP / db4. The server runs fine but I cannot get the client to work. Client and server are on the same machine, as for now. The problem seems to be in PAM. However I cannot start the system-config-authentication tool which should do the trick.
Environment
=========
CentOS release 5.4 (Final)
Software
======
authconfig-gtk-5.3.21-6.el5
system-config-securitylevel-tui-1.6.29.1-2.1.el5
system-config-network-tui-1.3.99.18-1.el5
[Code]....
View 3 Replies
View Related
Nov 23, 2010
I am currently working to get to a stable dual boot Win7/CentOS 5.5 configuration on a Dell Latitude E6510 with the Intel 82577LM chipset. I haven't gotten the Centrino N WiFI chipset working yet, but the Eth0 device was working just fine.However, yesterday I did a system update. I did not pay close attention, but I believe the update did mention networking, because I thought it might help me get my wireless going. Now, Eth0 fails with the message, "Determining IP information for eth0... failed; no link present. Check cable?" It does this at boot up and if we try reactivating it once the system is up. We have tried unstalling and re-installing the driver.The Window 7 boot sees the adapter and runs just fine. I was at a different site location yesterday when everything was working, but my co-workers and I can't help but think it might be related to the update yesterday, since everything worked prior to the update and Windoze 7 works fine with the adapter.
I have not been able to mount my NTFS harddrive on the CentOS side, despite installing fuse, and I don't have wireless, which makes it difficult to get access to new drivers. I also have a FAT32 partition that would be great to share between the boots for passing info, but I haven't found a way to mount a FAT32 partition in CentOS.
View 6 Replies
View Related
Sep 25, 2009
i want to authenticate user (client) via switch to the radius server(CentOS)Can anyone tell me the authentication/authorization configuration that should be made in the switch (huawei) and the radius server(centos).Esp. the main files under /etc/raddb/ in the Server& the configuration to be made under the radius server template "test"( as of my case)...
View 1 Replies
View Related
Sep 1, 2011
I was having a problem with a fresh 11.04 install and the VPN software I use for work. I found the fix was to upgrade the software, so I downloaded an RPM, converted it to .deb and installed it via dpkg. The install worked and the VPN software now works, but Package Manager says I have a broken package and wants to 'upgrade' to the older broken one. How can I fix this without breaking my VPN SW again?
View 1 Replies
View Related
Jul 27, 2011
I am interested learning about networks in Linux and prefer to use Ubuntu. I hope the title is reflects what I really need to know. If not sorry about that.I have an requirement, it is to have a server to handle authenticaition of users so generally users can use that server to use specific services such as login (to linux), mail (postfix) and perhaps a file server (to hold user data, lets say what we have on /home/[username])I did some reading, and it looks like I will need LDAP and Kerberos. But I couldn't get a good understanding on how to practically deploy such a service.I would be obliged if some you guys can give me some guidelines on how to achieve my goal. Topics I need to read, books I could refer would be a plus.To tell you some thing about me, I am not a *NIX guy, my knowledge is kinda just above basic.
View 1 Replies
View Related
Apr 5, 2010
I'm trying to learn Kerberos and I'm doing so by following O'Reillys book. Kind of turn-off when things are not functioning properly when one follows instruction. It fails basically at the very beginning - creation of a new realm, when I execute the command:
kdb5_util create -s
I get the error message:
Quote:(null) Improper format of Kerberos configuration file while initializing Kerberos code I'm not finding anything in any log. My configuration files (followed by the book, but tweaked to my environment):
Code:
[Code]...
View 1 Replies
View Related
Jun 13, 2011
I cant access my box after upgrading from fedora 13 to 15 i wasn't near the computer during the process and i don't know if it asked for user and password ,but its upgrade and it need to have my old setting so why i'm not able to log in at all , even not as root.
View 6 Replies
View Related
Feb 12, 2010
I am running CentOS 5.3.The NIC on my motherboard does not support gigabit, so I bought a gigabit network card. I installed the network card and configured it via system-config-network. Everything seems to work fine as long as I keep a cable plugged into the original NIC. The original NIC works just fine if it is the only one with a network connection, but as soon as I uplug the original NIC I can no longer ping nor connect to the server via the gigabit NIC.
The original NIC is eth0, the new NIC is eth1. Is there something I need to do to tell the system that eth0 is not required or something? I've never encountered an issue like this before...
View 5 Replies
View Related
Aug 23, 2009
A recent upgrade from 10.3 to 11.1 went remarkably well --however, Apache (integrated with osCommerce), was broken:
tall:~ # uname -a
Linux tall 2.6.27.29-0.1-default #1 SMP 2009-08-15 17:53:59 +0200 x86_64 x86_64 x86_64 GNU/Linux
[code]....
View 6 Replies
View Related
Apr 28, 2010
After upgrading my 64bit 9.10 install to lucid, KDE went poof. I am presented with the login screen, and after supplying my credentials the screen goes black and all I am left with is a mouse pointer.
According to ps kded4 is dead (zombie). kdm.log also indicates a problem with ibus. I installed the "ibus" pkg, but didn't resolve it. Attached is an excerpt of my kdm.log, I can't really find useful information in syslog/dmesg/messages. The system is up-to-date and I've tried starting with a clean user account as well as removing the .kde directory.
View 9 Replies
View Related
May 2, 2011
Curious thing happening since upgrade. The desktop toolbar is invisible, although I can get click and access the drop down menus for login, calander, power settings etc. Alt-tab works in 2D. The new desktop icons for natty are also invisible. I have tied to access a terminal using Alt-F2, but terminal window doesnt open. I had compiz running on previous 10.10 installation. I am at a loss as to where to begin fixing this. If I didn't have a windows 7 installation partition that would get screwed up I would flatten the installation and download and install a fresh install, but I do and I don't want to go through that pain if I don't have to.
Running Lenovo 3000 C200 with intel gm1345 gfx.
View 1 Replies
View Related
May 7, 2011
I recently upgraded to Ubuntu 11.04 and my program call "mnemosyne" broke! Here is the error:
emil@linux-desk:~$ mnemosyne
Traceback (most recent call last):
File "/usr/local/bin/mnemosyne", line 5, in <module>
pkg_resources.run_script('Mnemosyne==1.2.2', 'mnemosyne')
File "/usr/lib/python2.7/dist-packages/pkg_resources.py", line 467, in run_script
self.require(requires)[0].run_script(script_name, ns)
[Code]...
View 3 Replies
View Related
