So I was trying to configure my CUPS server and checked the box marked "Use Kerberos Authentication." Now, I cannot change anything and get an unauthorized error every time I try. How can I remove Kerberos? I have access to the local computer as root and can use sudo.
View 2 RepliesPretty much as described in the thread title. I'm running RHEL6 on both the server and the client.I followed Red Hat's own instructions to set the kdc upI have a user called krb, that has been added to the KDC and I can get a ticket from the KDC, by using
Code:
kinit -p krb
If I then try to log in to the KDC, from the KDC, with
[code]...
I have a samba server for company file shares but we do not use domain services or active directory service. Each workstation is its own standalone system. (And we want to keep it this way.) I would like to have some centralized authentication though, and it looks like Kerberos will provide that. After a lot of searching though, I can't find any instructions for setting up samba to authenticate users using kerberos without an ADS (active directory service) or domain. Is this possible?
View 1 Replies View RelatedI had a working client installation with CentOS 5.4, using kerberos and PAM to authenticate. After an upgrade to 5.5, logins for users are no longer possible. Instead I get this:
/var/log/messages: gdm: Couldn't set acct. mgmt for <user> /var/log/secure: gdm: pam_krb5: authentication fails for '<user>': (<user@domain>): Authentication failure (Cannot read password) gdm: pam_krb5: account checks fail for '<user>': unknown reason -1765328254 (Cannot read password) gdm: pam:krb5: User not known to the underlying authentication module (Client not found in Kerberos database) "kinit <user>" still works as expected, and <user> has no problems logging in from other types of clients. Something kerberos-related apparently broke in CentOS 5.5,
I am looking for some links to configure kerberos authentication for ssh.I did tried google-ing it, but could not found any good link to go ahead with it.
View 1 Replies View RelatedI recently upgraded my video card from a GeForce4 MX 440 AGP 8X to a GeForce FX 5500 AGP 8X. After that my 1360x768 monitor was stuck on a 1024x768 resolution. I ran system-config-display and under Hardware tab I changed the monitor setting from "Generic LCD Screen" to "1360x768 LCD Screen" with the acknowledgment that /etc/X11/xorg.conf file was been modified. After reboot the boot process stuck on:tarting kojid: Kerberos authentication failed. "Resource temporary unavailable" (11) [FAILED]I tried that with both 2.6.34.6-54 and 2.6.34.6-47 kernels available on my system.I use the latest KDE version available for Fedora.
View 1 Replies View RelatedI've configured kerberos authentication on my centos 5.2 box. When I kinit with a username in AD and not on the centos box, I get a TGT. However, I cannot log into the centos box as any of the AD users. This is probably a stupid question but do I also need to create the account's on the centos box that I have in AD? If so, does that mean i can then use pam to authenticate users on my cyrus imap process running on the centos box?
View 2 Replies View RelatedI have the following version of centos,kerbose and samba (Samba version 3.0.33-3.29.el5_5.1, krb5-libs-1.6.1-36.el5_5.5 , krb5-workstation-1.6.1-36.el5_5.5 , centos-release-5-5.el5.centos) i have configured it and qhw i givit give me the following error Failed to set password for machine account NT_STATUS_ACCESS_DENIED) Failed to join domain: Access denied
[Code]...
I have installed keberos on my suse machine, but after installation now I am not able to login in it even with the root password. I search over the internet but could not find the solution. What to do now and how to configure Kerberos on a local machine with only local users authentication. I mean client and server both are on the same machine.
View 2 Replies View RelatedI have set up my KDC and telnet in the same server.
I am trying to telnet from a local PC . This is the output I am getting ..
[sudip@kdcclient root]$ telnet -a -F -x kdc
Trying 192.168.1.3...
Connected to kdc.example.local (192.168.1.3).
Escape character is '^]'.
[Code]....
So why it is asking for password ? What I am missing here ?
I have a printer configured on my Ubuntu server using CUPS amd made it available to the local network. The printer is recognized on my other Ubuntu machine without any problems.
But on my Suse laptop, the printer is not recognized. Using the YaST printer Configuations, I choose the option "Recieve Printer Information from Remote CUPS servers. But no printer is found.But... when I choose Do All Yout Printing Directly via One Remote CUPS server and enter the correct IP address (192.168.1.100), the printer is found andI am sure the printer info is broadcasted because it shows up on my second Ubuntu PC. But why is it not recognized by default on my Suse machine
cups does not start with the server. When I try to start from the terminal I get the error message
cupsd: Unable to read configuration file '/etc/cups/cupsd.conf' - exiting!
cupsd: Child exited with status 1!
The log files show nothing. cupsd.conf exists. It is user - root and group - root with permissions set at 0644.
My interpretation of this is that the program is not launching from either boot or terminal for a fundamental reason. I do not quite see what that reason is .
server not exporting CUPS printer?
View 9 Replies View RelatedI just setup a Ubuntu CUPS print server. However when I I try to browse to it, it tells me that I do not have permission to do so and does not let me see the printers or any shared folders.
View 5 Replies View RelatedI have been working through setting up a CUPS server on my Dell Dimension 2000 which is running Ubuntu 10.04. I have the server set up and the printer added and have gone through all of the steps the tutorials suggest to get the printer to be viewed on the network (set it to shared, allow other machines to view shared printers, etc). However, I can't find this printer on any of the other machine on my LAN (one machine running mac os x the other running Ubuntu 10.10).
View 2 Replies View RelatedI have Rechat FC4 with CUPS 1.45 and a Dlink DS-802 Print Server.
I have installed CUPS, and pointed it at the DS-802,
but no joy.
Windows already prints to the 802 via a W2k3 server, so that works fine. FC4 with CUPS seems to point at the 802 but print jobs from localhost (just go to the print queue, and there they stay.
Windows continues to function fine, but linux wont send to the 802. Also, if Windows users try to print to the CUPS shared printer, it shows "No Accesss".
I just recently bought a WinStar USB LPR Network Print Server so that I could connect my printer to my network so all the machines on my network could print, and everything would be OS independent. The problem I'm having is that I can't get CUPS to connect to the printer. It either never prints anything, saying that the printer is not connected, or saying that LPR is spooling the job, but it never completes. I've been configuring it as a network printer in CUPS, and trying all the different configuration options to no avail. The print server is located on http://192.168.1.103 and is pingable. The print server I have is this one:
WinStars Networking USB LPR Print Server
What is the correct way to set up a print server like this so I can print to it?
installed lenny and am trying to install brother dcp7010 again:
1) i can't start CUPS server with /etc/init.d/cups restart "file not found", there is a cups@ link in /etc/init.d.
2) when i install dcp7010 cupswrapper
dpkg -i cupswrapperDCP7010-2.0.1-2.i386.de
it ends with
" lpinfo: Verbindung zum Server nicht m�glich: Verbindungsaufbau abgelehnt
lpadmin: Verbindung zum Server nicht m�glich: Verbindungsaufbau abgelehnt"
(connection to server not possible, refused)
3)[URL] doesn't work.
4)foomatic-gui can't find the installed dcp7010 lpr-driver
brdcp7010lpr-2.0.1-1.i386.deb, (a couple of days ago it did)
This is frustrating because it worked in etch and worked for awhile in lenny. The dcp7010-scanner does work.
I have been able (with some hair pulling and gnashing of teeth) to print from outside the LAN to the printer connected via USB to the desktop computer at home, until the last upgrade. The laptop will forst say the printer may not be connected, but eventually (usually) after a while says the job was sent to the printer. The log files on the desktop - serving as the printer server have an error message in cups/error_log that I am not familiar with, and don't believe I have seen before. I am sure if I could decipher that error and figure out how to change the behavior to get rid of it, it would once again work. Printing from within the LAN is a no-brainer as it has been for the last several releases. The error that I get when trying to print outside the LAN (via the internet) is:
cupsdAcceptClient: 12 from <WAN IP>:631 (IPv4) Unable to encrypt connection from <WAN IP> - GnuTLS internal error. I am missing something as far as authentication from the laptop to the desktop. how to fix it.
this is all I need simple VPN with authentication to external Radius server. Here is what I have done to try and get this goal accomplished. 1st try using PPTPD and Radius plugin No matter what I have tried (long explanation here [URL].. I can't get PPTPD to talk to my Radius server, even though I can authenticate using the same server and radius server using pam radius. PPTPD just won't, and so far the POTOP mail list has been quiet since my post to them and no replies/ideas in my other post, see forum link above.
2nd try using OpenVPN and their pam auth plugin. I give up on this one! I have the server working great BUT! As soon as I enable the plugin /usr/lib/openvpn/openvpn-auth-pam.so in the config I get this when trying to start the VPN server. kernel: [3725586.167177] openvpn[28364]: segfault at 0 ip 00007fd6e5e38fb4 sp 00007fff434f18f0 error 4 in openvpn-auth-pam.so[7fd6e5e38000+3000] Google turns up nothing on Segfaults on the openvpn-auth-pam.so Ug at my wits end, anybody have any other suggestions? I'm at a total loss ATM.
Our system setup: windows server domain controller 2008 We are installed sambain Ubuntu 11.04, with ads authentication using winbind,i can able to give the access restriction from Linux for windows ADS User for linux samba share folderall are working fine from Linux,i want give the access fro domain user from MS -windows , what is the file permission owner ,etc, any one try this concept please give me a any document any example
View 1 Replies View RelatedI am attempting to Kerborize an NFS server on a RHEL6 machine, but I cannot get it quite right. The error message I receive when executing the following command (as myself, not as root) is:
Code:
I have a keytab generated from the KDC for both NFS server and NFS client (both RHEL6 hosts) placed in /etc, and I have configured PAM/Kerberos so I can login via SSH and see I have a valid ticket with klist.
I can login to both NFS server and NFS client via SSH and get a ticket, but I don't know where the problematic NFS permissions reside.
The /etc/exports file on the NFS server looks like:
Code:
I have disabled IP Tables on both client and server, and hosts.allow and hosts.deny are not blocking traffic at the moment. On the NFS server.
Here is the output of rpcinfo:
On the NFS client, here is the output of that same command:
I have a problem with ldap client authentication in ubuntu. I am using rhel5 as openldap server and I configured ubuntu as client, when I am trying to login the following message is coming."su: Authentication service cannot retrieve authentication info. Sorry"
But when I do search through "ldapsearch" command output is coming without any errors, Can anybody explain what would be problem.
I've my RHEL4u4 integrated with Active Directory.
I can logon to computer with username/passwd from AD.
But if I try to use ssh, is doesn't work
When I try to connect to the same computer using kerberos I receive this messages:
ssh -vv server.domain.com
....
debug1: Authentications that can continue: publickey,gssapi-with-mic,password
debug1: Next authentication method: gssapi-with-mic
debug2: we sent a gssapi-with-mic packet, wait for reply
[Code]....
and it tries to use publickey and finally, user/pass.
What do I've have do for using ssh and kerberos? I use samba for joining computer to AD. I tried it in ubuntu 8.04 and likewise-open and it works, but not in RH-Samba.
I'm trying to configure SSH for accessing with kerberos. I try to configure a SSO. The computer is joined to Active Directory. I can access with the user/pass from AD (using samba/winbind), but if I try to connect using kerberos, the error:
Server not found in kerberos database. The server is CentOS 5.5, but also tried with RHEL 5.5.
Configuration
Domain: net
Realm: TEST.NET
User: usertom
Server ssh: testul0001.test.net
Client ssh: testul0001.test.net (connect to the same computer)
Domain controler: testgc01.test.net .....
Following the instructions listed here:[URL].. I have a machine set up to use Kerberos authentication for logins. The problem is, logins are now incredibly slow and any user from the AD fails to log in.Here's the output from the server in debug mode:
[Code]...
What I want to do is use a Windows AD with the UNIX extensions to control user logins on CentOS 5.5 servers. Previously I've used OpenLDAP and AD, but that was still two separate auth methods and I just want one.
I have a network and am using squid proxy with authentication I want to create another subnet without authentication.
View 1 Replies View RelatedAm using Fedora 15, in which i was able to configure the proxy server and authentication. i confirmed this by configuring web broswer and it works. Now the problem is that i want to deploy it out to other computer system(client) i dont want to use the transparent proxy because the Proxy Authentication will not work.
I even tried to configure a DHCP server if it will work but i cant still configure for other computer system to work.
Is it possible to secure samba server with kerberos? I want to know whether we can use kerberos authentication to secure samba user name and password so that mo one can sniff that information. configuration or any URL link from I can get the exact configuration.
View 1 Replies View RelatedI'm setting up kerberos and I can't login with kadmin but I am getting tickets with kinit, my princs are valid, and my dns resolves with dig/ping, am I missing something?:
kadmin:
Code:
home-plug:/home/steven# kadmin
Authenticating as principal root/admin@SOUR-LAN.LOCAL with password.
Password for root/admin@SOUR-LAN.LOCAL:
kadmin: GSS-API (or Kerberos) error while initializing kadmin interface
auth.log
Code:
Oct 20 22:18:13 home-plug kadmind[8935]: Seeding random number generator
Oct 20 22:18:20 home-plug krb5kdc[8778]: Interrupted system call - while selecting for network input(1)
Oct 20 22:18:20 home-plug krb5kdc[8778]: shutting down
Oct 20 22:18:20 home-plug krb5kdc[8939]: setting up network .....