Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.user > #221928
| From | "Jean-Luc C." <knut1er@gmail.com> |
|---|---|
| Newsgroups | linux.debian.user |
| Subject | Re: Linux & AD mixted authentication issue |
| Date | 2020-04-25 15:10 +0200 |
| Message-ID | <zZsJb-4jd-1@gated-at.bofh.it> (permalink) |
| References | <zZsga-3UO-19@gated-at.bofh.it> <zZsga-3UO-17@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
[Multipart message — attachments visible in raw view] - view raw
Please find the following link:
https://wiki.debian.org/AuthenticatingLinuxWithActiveDirectory
I don't know why it was truncated
Le sam. 25 avr. 2020 à 14:35, Jack Dangler <tdldev@gmail.com> a écrit :
>
> On 4/24/20 5:08 PM, Jean-Luc Chandezon wrote:
>
> Hello,
>
> I configure AD authentication (I followed
> https://wiki.debian.org/AuthenticatingL ... eDirectory), and it works
> fine.
>
> I added AD group to debian sudoers, no problem. @mydomain.ad is the
> default suffix for login. USers does not need to put this.
>
>
>
> My issue:
>
> Even locally I can not open session aymore, as root, or as local unix
> user. Is it possible?
>
>
>
> Here are krb5.conf:
>
> -----------------------------------------------------------
>
> logging]
>
> Default = FILE:/var/log/krb5.log
>
>
>
> [libdefaults]
>
> ticket_lifetime = 24000
>
> click-skew = 300
>
> default_realm = MYDOMAIN.AD
>
>
>
> # The following krb5.conf variables are only for MIT Kerberos.
>
> kdc_timesync = 1
>
> ccache_type = 4
>
> forwardable = true
>
> proxiable = true
>
> [realms]
>
> MYDOMAIN.AD = {
>
> kdc = mydomain.ad:88
>
> admin_server = mydomain.ad:464
>
> default_domain = mydomain.ad
>
> }
>
>
>
> [domain_realm]
>
> .mydomain.ad = MYDOMAIN.AD
>
> mydomain.ad = MYDOMAIN.AD
>
> -----------------------------------------------------------
>
>
>
> Thanks
>
>
>
> Jean-Luc
>
> Surprised you got to the page. I get -
> Forbidden
>
> <p>You are not allowed to access this!</p>
>
> when attempting to access the wiki at all.
>
Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Re: Linux & AD mixted authentication issue Jack Dangler <tdldev@gmail.com> - 2020-04-25 14:40 +0200
Re: Linux & AD mixted authentication issue "Jean-Luc C." <knut1er@gmail.com> - 2020-04-25 15:10 +0200
Re: Linux & AD mixted authentication issue Greg Wooledge <wooledg@eeg.ccf.org> - 2020-04-27 13:30 +0200
Re: Linux & AD mixted authentication issue Brian <ad44@cityscape.co.uk> - 2020-04-27 14:00 +0200
Re: Linux & AD mixted authentication issue Greg Wooledge <wooledg@eeg.ccf.org> - 2020-04-27 14:30 +0200
Re: Linux & AD mixted authentication issue Jack Dangler <tdldev@gmail.com> - 2020-04-27 15:40 +0200
Re: Linux & AD mixted authentication issue Brian <ad44@cityscape.co.uk> - 2020-04-27 16:30 +0200
Re: Linux & AD mixted authentication issue Celejar <celejar@gmail.com> - 2020-04-27 16:40 +0200
Re: Linux & AD mixted authentication issue Greg Wooledge <wooledg@eeg.ccf.org> - 2020-04-27 16:50 +0200
Re: Linux & AD mixted authentication issue Andrei POPESCU <andreimpopescu@gmail.com> - 2020-04-27 14:30 +0200
Re: Linux & AD mixted authentication issue Jack Dangler <tdldev@gmail.com> - 2020-04-27 15:50 +0200
csiph-web