Re: Kerberos + SSH question

On Thu, 22 Jun 2006 21:22:53 +0200, Sebastian Hanigk <hanigk@xxxxxxxxx> wrote:

none@xxxxxxxxxxx (Nod) writes:

Hello,

To elaborate just a bit: Kerberos allows the server to believe that it is
talking to a particular Kerberos principal, which is a point in a
namespace entirely separate from the account space the host itself. The
decision of what, if any, local resources to allow this principal access
to is a separate matter. With SSH, you are asking for access to a
resource (account) that doesn't exist. It doesn't matter who you're
authenticated as; there's nothing to give you.

Well, this makes a lot more sense now. Would you happen to know where
I could find a good guide for integrating LDAP with ssh? I've been
over a bunch of them, and just keep getting more confused by LDAP the
more I read.

you don't have to use LDAP for the accounts service; you can
authenticate via Kerberos and then use the /etc/passwd

Regards,

Sebastian

Indeed, but I'm trying to avoid deploying updated passwd files to 100+ servers.
.

Relevant Pages

  • Re: Anonymous LDAP Access Problem
    ... Check the ADSI ... I need to authenticate using LDAP and I still am having some problems. ... which works when that is a domain account, but does not when that account ...
    (microsoft.public.windows.server.active_directory)
  • Re: LDAP Permissions
    ... a normal AD account that you might use as a service account for ... performing LDAP queries won't have permissions to modify anything in AD ... to authenticate the user. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Anonymous LDAP Access Problem
    ... I need to authenticate using LDAP and I still am having some problems. ... I will be able to do it as AD has been opened up for anonymous access. ... which works when that is a domain account, but does not when that account is ...
    (microsoft.public.windows.server.active_directory)
  • Re: Kerberos + SSH question
    ... namespace entirely separate from the account space the host itself. ... I could find a good guide for integrating LDAP with ssh? ... authenticate via Kerberos and then use the /etc/passwd ...
    (comp.protocols.kerberos)
  • Design/Pattern guidance to refector my current design for unit testing
    ... short requiredRoleID, out UserAccount account); ... When the application consuming AuthMgr starts up, ... Authenticate auth = new Authenticate; ... // This stuff is all here so I can unit test the authentication system ...
    (microsoft.public.dotnet.languages.csharp)