This is an old revision of the document!
Добавляем пользователя в AD
Login: gatehost Password: Pa$$w0rd
Пароль не меняется и не устаревает
Устанавливаем Microsoft Windows Support Tools
C:\>ktpass -princ host/gate.adcorpX.un@ADCORPX.UN -mapuser gatehost -pass 'Pa$$w0rd' -out gatehost.keytab C:\>pscp gatehost.keytab student@gate:
gate# ktutil copy ~student/gatehost.keytab /etc/krb5.keytab gate# touch /etc/srvtab gate# ktutil list
root@server:~# ktutil ktutil: rkt /usr/student/gatehost.keytab ktutil: list ktutil: wkt /etc/krb5.keytab ktutil: quit
gate# cat /etc/ssh/sshd_config ... GSSAPIAuthentication yes ...
Hostname: user@gate.adcorpX.un SSH->Auth-Attempt GSSAPI...