I'd like to know if network-manager applet could be run on gdm login menu. Cause i would like to get connected on my network to reach kerberos serveur to login. nm-applet on gdm
View 5 Replies
Following the instructions listed here:[URL].. I have a machine set up to use Kerberos authentication for logins. The problem is, logins are now incredibly slow and any user from the AD fails to log in.Here's the output from the server in debug mode:
[Code]...
What I want to do is use a Windows AD with the UNIX extensions to control user logins on CentOS 5.5 servers. Previously I've used OpenLDAP and AD, but that was still two separate auth methods and I just want one.
I'm setting up kerberos and I can't login with kadmin but I am getting tickets with kinit, my princs are valid, and my dns resolves with dig/ping, am I missing something?:
kadmin:
Code:
home-plug:/home/steven# kadmin
Authenticating as principal root/admin@SOUR-LAN.LOCAL with password.
Password for root/admin@SOUR-LAN.LOCAL:
kadmin: GSS-API (or Kerberos) error while initializing kadmin interface
auth.log
Code:
Oct 20 22:18:13 home-plug kadmind[8935]: Seeding random number generator
Oct 20 22:18:20 home-plug krb5kdc[8778]: Interrupted system call - while selecting for network input(1)
Oct 20 22:18:20 home-plug krb5kdc[8778]: shutting down
Oct 20 22:18:20 home-plug krb5kdc[8939]: setting up network .....
I am trying to deploy Kerberos and LDAP so users will be able to login in to a server on the edge of the LAN, and afterwards be able to establish a SSH connection to all the computers in that LAN without the need to type any passwords, and without the need for me to manage SSH keys [beside the SSH keys on the login server] and local user accounts.
1. When i create the users in OpenLDAP i use a template that i created by reading documentation from the Internet. In the template one piece of information that is neede is the UID. Is there any clever way the keep track of the numbers so i do not assign the same UID to two users, besides using a pen and paper?
2. For the users to be able to establish SSH connections between the computers, the host is going to be added to the keytab like this: ktadd host/client.example.com Is is possible to replace client with something genric so i do not need to mange these keytab files between the hosts?
3. Users will be logging on the the server on the edge of LAN by using SSH keys. How can i configure the setup so the users will recieve a ticket automatically when the logon without executing kinit and without entering a password, just by having a valid SSH key?
4. krb5kdc is running on all the network interfaces in the server i want it to only run on eth1, how can this be done?
I'm setting up my server under CentOS 5.5 (text mode) and I installed cherokee server but I couldn't reach it with the ip given by ifconfig. So I figured it might be an problem within cherokee. I also wanted to install webmin so I did that to see if I could reach that one. But also the webmin server is not reachable (I know the port number should be behind the ip ). So if I look up ifconfig I see the server has got an local ip (192.168.1.42) but I can't reach it from another computer in the same local network.
View 1 Replies View RelatedI have set up a 389 DS server and a kdc. However there is not a howto or any document concerning setting up the DS as a Kerberos database back-end. Nor is there a 389 DS forum, so I am asking here and hopefully some of you could possibly help or throw in some light as to this kind of setup.I have read the 389 DS features page and the Redhat documents but there is no reference to this feature.
View 3 Replies View RelatedI was coding some java. I had just finished setting everything up & everything was working fine so I kind of freaked out when I typed `javac hw.java`, and I received a weird error. I can't remember it exactly but from that point, I was not able to use any java-related command anymore. `javac`, `jar`, `java`.... I kept getting the same error. Something like "java runtine environement error", but it may not be that exactly. It kept creating .log files in my /home/maden/ folder, but as my topic title says, I can't reach the boot screen anymore ! I have no idea if the two problems are related but I think they are. When I got home, I restarted my ASUS eeepc 1005h and reached the KDE login screen anymore! I turn on my computer, it goes to the GRUB loader, I select fedora core 11... I then see the fedora fedora logo slowling filling up, as usual, and when the login screen is supposed to pop up, it does not. It just remains black. So now, I can't do ANYTHING, can't even login as failsafe or nothing, my data seems unreachable!
View 13 Replies View RelatedI have an NIS server that is working well, and I want to use Kerberos to improve the overall security.I have already installed Kerberos client and server on two machines respectively.Currently the NIS server, Kerberos server, and KDC are running on the same box, and every box is in the same private network.I am having trouble logging in using the user account defined in Kerberos database. Here's /etc/krb5.conf on the client side:
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
[code].....
I wish to setup a network that works like windows but for with lunix of course!. It will need to be able to handle security/DNS/DHCP & Document store from one location. I've been doing some reading and have found that I think I need to be using one of the following:
LDAP
NIS
Kerberos
I have looked at a few Linux based OS's. I did notice that when you install fedora live desktop it gives you the option to connect to one of the above. So I am looking for a complete solution.
1. How to setup fedora to act as server for my needs (or other Linux build)
2. Add fedora/linux mint machines to server to use new security settings. (or other linux build)
I'm trying to login to a server using gssapi-with-mic authentication against one of my school's machines that supports this mode of authentication. I have these kerberos packages installed:
batrick@menzoberranzan:~$ dpkg -l | grep krb
ii krb5-config 2.2 Configuration files for Kerberos Version 5
[code]....
how can I check how fast is network connected to my server ? I mean upload/download. I have an access only to command line. Is there any nice command for this?
View 2 Replies View RelatedI am interested learning about networks in Linux and prefer to use Ubuntu. I hope the title is reflects what I really need to know. If not sorry about that.I have an requirement, it is to have a server to handle authenticaition of users so generally users can use that server to use specific services such as login (to linux), mail (postfix) and perhaps a file server (to hold user data, lets say what we have on /home/[username])I did some reading, and it looks like I will need LDAP and Kerberos. But I couldn't get a good understanding on how to practically deploy such a service.I would be obliged if some you guys can give me some guidelines on how to achieve my goal. Topics I need to read, books I could refer would be a plus.To tell you some thing about me, I am not a *NIX guy, my knowledge is kinda just above basic.
View 1 Replies View RelatedI am not able to login to server from console attached to server, every time i enter username & password but it again asks for username & password. But when i try to login to server from remote machine, login happens properly.
View 4 Replies View RelatedI just loaded F14 and want to use it as a file server. Not even certain where to get started. PC connected to the network, but can't see other PCs or Mac. thoughts?
View 7 Replies View RelatedIn the OpenSUSE documentation I red this very exciting chapter Chapter 6. Network Authentication with Kerberos That mentions "Using LDAP and Kerberos" which combined with NFSv4 would give my office net functionality of a M$ Win network.
We are still on 11.2 (we have no win clients at all) and I was testing different setups of 11.4 in VM, but I can't get YaST to configure the LDAP with Kerberos setup (our current setup does not use Kerberos only LDAP). Unfortunately I could not find any meaningful HOWTO on how to do it in SuSE. The page in docs involves editing config files, but I would like to avoid this, because from my former experience with Samba, as it would mean I cannot use yast anymore and that is sad.
Is there a way to configure LDAP + Kerberos (in terms of issuing of krb tickets at login) with YaST?
PS: I basically need Kerberos for NFS and Intranet site.
After doing updates a few days ago yumex stopped working. I started getting an error message when I try to run it, "no connected to a network". This is of course not true.
I've looked at yumex.conf and don't see anything wrong, and I downgraded the GTK2 packages from a post indicating a segfault issue with one of those packages.
yum works fine from the command line, so my system is fully updated.
I removed yumex and then reinstalled it with no joy.
In Ubuntu 9.10 (fresh install, not an upgrade from 9.04) on an ASUS EeePC 900, I was using wireless networking at home, which worked well. I took the netbook to work a few times and did not using it at home all that period of time. I connected it as a wired network (DHCP) at work, and it "just worked" fine (no configuration was needed). Now I tried to use it at home and wireless no longer works for all users. In System > Preferences > Network connections I can access the wireless configuration and it is still there, still with all the correct settings as worked before. However, in the network manager I access from the upper panel via the antenna icon, it now only lists a Wired network. The wireless network isn't in the list at all. No upgrades were done. I do those from home and tried to do one this morning but since wireless did not work I could not accomplish it.
I could hook it to a wired network, so if fixing this needs to upgrade something, that's doable (but I'd think it should not be needed since wireless did work before). I was going to try things like delete all networks and start again, but since that might lose information about a possible bug, I'm holding off.
I'm new to networks and servers, been using Linux on the desktop for a while now but always relied on the company's IT guy for setting up everyting LAN-based.
Now I want to build up my home LAN, and want to do it with Linux. I've managed to set up LAMP and file share servers.
What I am looking for is information on what I need, and how to set up a server for the following tasks:Centralized Username and Password, that when the user logs into any one of the desktops in the LAN, it uses this for authentication
Something that allows this authentication to be utilized in other servers (file access, web access, router logging, etc.). Something to make it easier for continuing permissions from one service to another. e.g. I have IPCop filtering content, and it has provisions for tracking who is making which request if there is authentication going on. (optionally) to run a script for mounting Samba shares or mapped network drives so from one system to the next. For example, in whatever box somebody logs in, it mounts a server share ("smb://Myserver/users/<username>") to a local folder ("my_user_share").
So;user "fred" ="smb://Myserver/users/fred" and user "wilma" = "smb://Myserver/users/wilma" but both would find their respective one mounted under "~/my_user_share". This would be irrespective of which box they are loggin in with. If the server share location changes (new server/servername), I change it on the server so the next time they log in it points to the right place.
I guess it is similar to Window's Active Directory, though I'm not sure what it's called, how to configure it and what it is and is not capable of doing.
I am amidst installing an MIT Kerberos server right now and I got stuck on the initialization of the realm. Whenever I issue the krb5_util create command I end up getting a segmentation fault, the principals don't get created and the server is still pretty much useless.
Code:
linux-z0kg:/var/lib/kerberos/krb5kdc # kdb5_util create -r METROPOLIA.LAN -s Loading random data Initializing database '/var/lib/kerberos/krb5kdc/principal' for realm 'METROPOLIA.LAN', master key name 'K/M@METROPOLIA.LAN' You will be prompted for the database Master Password. It is important that you NOT FORGET this password. Enter KDC database master key: Re-enter KDC database master key to verify: Segmentation fault Whenever I try to start the kadmind or krb5kdc services I get the following error:
Code:
Error. Default principal database does not If anyone has an idea how to solve this
I am trying to boot my laptop in text mode while it is not connected to a network. A message keeps popping up " eth0 ... negotiating". Does anyboy know how to turn it off? I tried "ethtool -s eth0 autoneg off. It still won't stop. I had tried editing /etc/sysconfig/network and turning off networking by NETWORKING=no. Still the same.
When I boot in the graphic mode, this problem of pesky message does not come out. I want to use the text mode since I will use my computer for editing documents and will be using vi only. In the text mode, when I plug it to a network, the persistent message stops but returns the minute I unplug the network. I want to use it unplug to the network since I will not have access to a network all the time. By the way, I am using Fedora 11. I am using a wired DSL network. My computer can do wireless but i had it disabled or switched off.
I have installed Linux for the first time on an old Gateway purchased from work. The system seems up and running, but I can't get connected to my wireless or the wired network. I have tried using the network manager, but it isn't working. I have tried reinstalling Fedora 12 I have the following LSUSB and LSCPI output.
[Code]...
I am new to this and have no idea what I am to do.....I had Fedora 14 installed on my computer. I have Centurylink as my Internet network. Is there someone who can tell me how to get connected to my centurylink wireless network?
View 4 Replies View RelatedI just installed a dualboot win7/F15 on my laptop (dell XPS 15) and everything seems to be working fine except that when I connect to my network it is connected and the network is accessible (I can visit my gateway/ router) but when I try to visit a website it simply never ends loading it.Internet is working on win7 so it isn't my network's fault.Now I found somewhere that updating could help but since I dont have internet I can't update
View 3 Replies View RelatedSuse 11.2 > updated Feb 2 using the Update UI applet.
I had internet connectivity prior to installing the updates. Now I can't reach the internet since installing the updates. I can reach my router, log in to the router I also ping the router but I can not ping the WAN side ip on the router.
When I boot into redmond, no issues, which is what I'm using as I write this.
I have security enabled, WPA2 Personal, not that I think that is an issue as I can reach the router, my server, network printers, and PC's.
I am running a Linksys router but have replaced the standard Linksys software with DD-WRT v24-sp2 build date 12/28/09 std. One note, DD-WRT does hand out IpV6 address but I have disabled FF from using IpV6 address along with the network connection configuration applet from accepting them. (I don't remember the applets name)
In the redmond world this would be a certificate error, is this the same type of an issue? If so how do I fix it?
I have a Netgear WG511GE PCMCIA card, and a driver from the original installation disk. I used an ndiswrapper-utils gui called ndisgtk to install the driver. I then do the following to verify an installation:
[Code]....
Unfortunately, when I put the PCMCIA card in, nothing happens. On Windows, a green light flashes even if the card is not connected to any network. At first I thought this might be a hardware issue, so I did #lspci and got:
[Code]....
Lo and behold, when I put a different unbranded Wireless PC Card in it works. I'm no expert in Networks, but to me this suggests a driver problem (i.e. the card is physically detected it just won't work). However, the correct driver was installed with ndisgtk and this was verified with #ndiswrapper -l, hence the confusion.
I'd be grateful if anyone else has had this problem/knows of this problem and is willing to share the solution with me/point me in the right direction. So far, Google has returned a few posts from a few years ago talking about patching kernels and manually building files etc (just before Prism54 became integrated into the Linux kernel).
I'm trying hard to run an openvpn server on a openvz VPS, the problem is packets sent from openvpn server process, doesnt reach the client, so connection is never stablished (I run tcpdump on server and wireshark on client to carefully investigate whats wrong), the first guess is that a kind of firewall is blocking traffic (I tried connecting to server through different ISP's but it's possible the national network provider applied some filtering but it cant be on IP,src port or dst port as I'd tried different configuration.
what about deep packet inspection technics, is it possible to block my traffic?) but at exactly the same time I can transmit UDP packets using netcat from server to the guest. there is no firewall enabled in between, I had tried, tcp and udp, tried both open vpn and openvpnAS and tried any thing one can imagine! the VPN is configured as a routed (TUN) type on debian
I am attempting to Kerborize an NFS server on a RHEL6 machine, but I cannot get it quite right. The error message I receive when executing the following command (as myself, not as root) is:
Code:
I have a keytab generated from the KDC for both NFS server and NFS client (both RHEL6 hosts) placed in /etc, and I have configured PAM/Kerberos so I can login via SSH and see I have a valid ticket with klist.
I can login to both NFS server and NFS client via SSH and get a ticket, but I don't know where the problematic NFS permissions reside.
The /etc/exports file on the NFS server looks like:
Code:
I have disabled IP Tables on both client and server, and hosts.allow and hosts.deny are not blocking traffic at the moment. On the NFS server.
Here is the output of rpcinfo:
On the NFS client, here is the output of that same command:
I am trying to mount a directory from my server onto my wireless laptop. The directory mounts successfully if I am already logged into the laptop with another account first but if I log on initially with the user who requires the mount the mount fails. I suspect the mount is taking place before my network connection is up, is it possible therefore, to delay the mount in fstab until the network is fully connected?
View 3 Replies View RelatedI've my RHEL4u4 integrated with Active Directory.
I can logon to computer with username/passwd from AD.
But if I try to use ssh, is doesn't work
When I try to connect to the same computer using kerberos I receive this messages:
ssh -vv server.domain.com
....
debug1: Authentications that can continue: publickey,gssapi-with-mic,password
debug1: Next authentication method: gssapi-with-mic
debug2: we sent a gssapi-with-mic packet, wait for reply
[Code]....
and it tries to use publickey and finally, user/pass.
What do I've have do for using ssh and kerberos? I use samba for joining computer to AD. I tried it in ubuntu 8.04 and likewise-open and it works, but not in RH-Samba.
I recently installed fedora 15 on my computer but I have a huge problem. I can connect to my router wirelessly for a couple of minutes only. Afterwards my computer has no Internet connection although the network manager and the icon on the upper bar says that i am still connected. I tried editing the /etc/rc.local and /etc/resolv.conf as mentioned in other posts in here bit no luck so far.
View 6 Replies View Related
