Kerberos Authentication Support help

Todd Grayson tgrayson at cloudera.com
Thu Oct 6 15:54:58 EDT 2016


Anil,

This is not really "support" more than a community discussion list (for
your information).

Do a 'which kinit' to verify your proper path to the kinit command on the
distro you are on...

This works, but realize the path /opt/boksm/bin/kinit is not valid (by
default) on linux...

for example:

[12:50 root at admin1 ~] > which kinit
kinit is /usr/bin/kinit
[12:50 root at admin1 ~] > kdestroy
[12:50 root at admin1 ~] > klist
klist: No credentials cache found (ticket cache FILE:/tmp/krb5cc_0)
[12:50 root at admin1 ~] > echo "Password1" | /usr/bin/kinit
tgrayson at AD.EXAMPLE.COM
Password for tgrayson at AD.EXAMPLE.COM:
[12:50 root at admin1 ~] > klist -ef
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: tgrayson at AD.EXAMPLE.COM

Valid starting     Expires            Service principal
10/06/16 12:50:40  10/06/16 22:51:32  krbtgt/AD.EXAMPLE.COM at AD.EXAMPLE.COM
renew until 10/13/16 12:50:40, Flags: FRIA
Etype (skey, tkt): aes256-cts-hmac-sha1-96, aes256-cts-hmac-sha1-96

On Thu, Oct 6, 2016 at 1:39 PM, Robbie Harwood <rharwood at redhat.com> wrote:

> Anilkumar.Palahanumanthrao at wellsfargo.com writes:
>
> > Dear Support,
> >
> > We are using Kerberos Authentication in the past on AIX with the below
> command and it worked fine.
> > echo "password" | /opt/boksm/bin/kinit userid
> >
> > We recently migrated from AIX to Linux, and when we gave the above
> > commands,it is asking for password in interactive mode.
> >
> > userid 's Password:
> >
> > We would like to pass the password dynamically, please help.
>
> Is this MIT's krb5 or Heimdal's?  What version?
>
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
>


-- 
Todd Grayson
Business Operations Manager
Customer Operations Engineering
Security SME


More information about the Kerberos mailing list