Single Sign on not working

Mantas M. grawity at gmail.com
Mon Mar 5 09:45:36 EST 2012


On 2012-03-05 16:18, Basil Kurian wrote:
> I 'm trying to implement single signon using kerberos+LDAP. I 'm able to
> login to servers , but next time also , I 'm asked enter credentials. That
> is authentication is working , but single sign on feature is not working .
> 
> [root at client ~]# ssh bkurian at ldap2.shadow.com
> bkurian at ldap2.shadow.com's password:
> Last login: Mon Mar  5 19:39:11 2012 from client.shadow.com
> [bkurian at ldap2 ~]$ logout
> 
> Connection to ldap2.shadow.com closed.
> [root at client ~]# ssh bkurian at ldap2.shadow.com  -vvv

Kerberos doesn't remember credentials that way. You must first obtain a
TGT -- either manually using `kinit bkurian at SHADOW.COM`, or by
configuring the client system to do this upon logging in locally.

-- 
Mantas M. <grawity at gmail.com>


More information about the Kerberos mailing list