LDAP-Kerberos sync passwords

Adriana Gologaneanu adriana.gologaneanu at rcs-rds.ro
Tue Apr 7 10:15:35 EDT 2009


The issue with Ubuntu client it's fixed. I have added a login shell for 
users instead of "/bin/false".

Thanks!

Adriana Gologaneanu wrote:
> Hi again,
>
> Thanks first for all your advices. I configured Heimdal Kerberos with 
> smbk5pwd plugin, it works. I have to do more tests from java client to 
> be sure the passwords are correctly syncing.
>
> There is only a small error I have it at Gnome login with Ubuntu10 
> configured as client: "The system administrator has disabled your 
> account". It's the ldap account. Does it sounds to be a common error? 
> The user exists too in /etc/security/access.conf.
>
> Regards,
>
>
> Eduardo Sachs wrote:
>   
>> If you use Heimdal Kerberos, you can install the overlay smbk5pwd for OpenLDAP.
>>
>> It synchronizes the password for the Samba and Kerberos, and
>> userPassword is fixed with the string {K5KEY}.
>>
>> Yes, you need configure your Heimdal Kerberos with backend LDAP.
>>
>> Read more in:
>> http://www.openldap.org/devel//cvsweb.cgi/~checkout~/contrib/slapd-modules/smbk5pwd/README?rev=1.1.2.3&hideattic=0&sortbydate=1
>> http://eduardosachs.org/mediawiki/index.php?title=Heimdal_Kerberos_%2B_Samba_PDC_%2B_OpenLDAP_%2B_Squid_no_Debian_Etch
>> http://eduardosachs.org/mediawiki/index.php?title=Compilando_e_configurando_o_overlay_smbk5pwd_para_Debian_Etch
>>
>> Thanks!
>>
>> 2009/3/30 Adriana Gologaneanu <adriana.gologaneanu at rcs-rds.ro>:
>>   
>>     
>>> Hi,
>>>
>>> I'm using LDAP for authorization and Kerberos for authentication. The
>>> workstations are configured with pam_krb5 module.
>>> There is a way to sync passwords between LDAP and Kerberos? Both are on
>>> same machine and the passwords to ldap db are sent in MD5 via a virtual
>>> java machine. I can't do same with Kerberos cause there are no free java
>>> libraries. Also, I want to avoid ssh connection between java machine and
>>> LDAP/Kerberos server.
>>>
>>> Many thanks,
>>> Adriana
>>> ________________________________________________
>>> Kerberos mailing list           Kerberos at mit.edu
>>> https://mailman.mit.edu/mailman/listinfo/kerberos
>>>
>>>     
>>>       
>
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>   




More information about the Kerberos mailing list