This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
kerberos_аутентификация_в_microsoft_ad [2009/10/19 18:15] val |
— (current) | ||
---|---|---|---|
Line 1: | Line 1: | ||
- | ====== KERBEROS аутентификация в Microsoft AD ====== | ||
- | |||
- | ===== Настройка KERBEROS клиента ===== | ||
- | <code> | ||
- | gate# cat /etc/krb5.conf | ||
- | [libdefaults] | ||
- | default_realm = ADCORPX.UN | ||
- | |||
- | gate# kinit user | ||
- | |||
- | </code> | ||
- | |||
- | ===== Настройка библиотеки pam kerberos для сервиса ssh ===== | ||
- | |||
- | ==== FreeBSD ==== | ||
- | <code> | ||
- | [gate:~] # cat /etc/pam.d/sshd | ||
- | ... | ||
- | auth sufficient pam_krb5.so no_warn try_first_pass | ||
- | auth required pam_unix.so no_warn try_first_pass | ||
- | ... | ||
- | </code> | ||
- | |||
- | ==== Ububntu ==== | ||
- | <code> | ||
- | root@gate:~# apt-get install libpam-heimdal | ||
- | |||
- | root@gate:~# cat /etc/pam.d/sshd | ||
- | ... | ||
- | auth sufficient pam_krb5.so | ||
- | # Standard Un*x authentication. | ||
- | ... | ||
- | </code> | ||