User Tools
sspi_gssapi_аутентификация_для_сервиса_sshd
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
sspi_gssapi_аутентификация_для_сервиса_sshd [2010/09/14 09:40] val |
— (current) | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| - | ====== SSPI/GSSAPI аутентификация для сервиса sshd ====== | ||
| - | ===== Регистрация сервиса ssh в AD ===== | ||
| - | |||
| - | Добавляем пользователя в AD | ||
| - | <code> | ||
| - | Login: gatehost | ||
| - | Password: Pa$$w0rd | ||
| - | </code> | ||
| - | Пароль не меняется и не устаревает | ||
| - | ===== Копирование ключа KERBEROS AD на сервер ssh ===== | ||
| - | |||
| - | ==== Win2003 ==== | ||
| - | Устанавливаем Microsoft Windows Support Tools | ||
| - | <code> | ||
| - | C:\>ktpass -princ host/gate.corpX.un@CORPX.UN -mapuser gatehost -pass 'Pa$$w0rd' -out gatehost.keytab | ||
| - | |||
| - | C:\>pscp gatehost.keytab student@gate: | ||
| - | </code> | ||
| - | ==== FreeBSD, Ubuntu (8.04) ==== | ||
| - | <code> | ||
| - | gate# ktutil copy ~student/gatehost.keytab /etc/krb5.keytab | ||
| - | gate# touch /etc/srvtab | ||
| - | |||
| - | gate# ktutil list | ||
| - | </code> | ||
| - | ==== Ubuntu (10.04) ==== | ||
| - | <code> | ||
| - | root@server:~# ktutil | ||
| - | ktutil: rkt /usr/student/gatehost.keytab | ||
| - | ktutil: list | ||
| - | ktutil: wkt /etc/krb5.keytab | ||
| - | ktutil: quit | ||
| - | </code> | ||
| - | |||
| - | ===== Настройка сервиса sshd на использование GSSAPI ===== | ||
| - | <code> | ||
| - | gate# cat /etc/ssh/sshd_config | ||
| - | ... | ||
| - | GSSAPIAuthentication yes | ||
| - | ... | ||
| - | </code> | ||
| - | |||
| - | ===== Настройка GSSAPI клиента (putty) ===== | ||
| - | <code> | ||
| - | Hostname: user1@gate.corpX.un | ||
| - | SSH->Auth-Attempt GSSAPI... | ||
| - | </code> | ||
sspi_gssapi_аутентификация_для_сервиса_sshd.1284442819.txt.gz · Last modified: 2013/05/22 13:50 (external edit)
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
