User Tools
sspi_gssapi_аутентификация_для_сервиса_sshd
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
sspi_gssapi_аутентификация_для_сервиса_sshd [2009/10/21 14:03] val |
— (current) | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| - | ====== SSPI/GSSAPI аутентификация для сервиса sshd ====== | ||
| - | |||
| - | ===== Регистрация сервиса ssh в AD ===== | ||
| - | |||
| - | Добавляем пользователя в AD | ||
| - | <code> | ||
| - | Login: gatehost | ||
| - | Password: Pa$$w0rd | ||
| - | </code> | ||
| - | Пароль не меняется и не устаревает | ||
| - | |||
| - | ===== Копирования ключа KERBEROS AD на сервер ssh ===== | ||
| - | <code> | ||
| - | C:\>ktpass -princ host/gate.adcorpX.un@ADCORPX.UN -mapuser gatehost -pass 'Pa$$w0rd' -out gatehost.keytab | ||
| - | |||
| - | C:\>pscp gatehost.keytab student@gate: | ||
| - | |||
| - | gate# ktutil copy ~student/gatehost.keytab /etc/krb5.keytab | ||
| - | gate# touch /etc/srvtab | ||
| - | |||
| - | gate# ktutil list | ||
| - | </code> | ||
| - | |||
| - | ===== Настройка сервиса sshd на использование GSSAPI ===== | ||
| - | <code> | ||
| - | g13# cat /etc/ssh/sshd_config | ||
| - | ... | ||
| - | GSSAPIAuthentication yes | ||
| - | ... | ||
| - | </code> | ||
| - | |||
| - | ===== Настройка GSSAPI клиента (putty) ===== | ||
| - | <code> | ||
| - | Hostname: user@gate.adcorpX.un | ||
| - | SSH->Auth-Attempt GSSAPI... | ||
| - | </code> | ||
sspi_gssapi_аутентификация_для_сервиса_sshd.1256119432.txt.gz · Last modified: 2013/05/22 13:50 (external edit)
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
