Re: I've got Winbind working, now I want single-sign-on
- From: Owen Dunn <owend@xxxxxxxxxxxxxxxxxxxxxx>
- Date: Tue, 29 Jan 2008 19:43:27 +0000
Nico Kadel-Garcia <nkadel@xxxxxxxxx> writes:
Has anyone done this? Or are all the "single sign-on" references
I've found simply referring to single password, not to such an
automatic authentication technique?
Yep. From memory:
* Use winbind to make Unix box member of AD domain.
* net ads keytab on the Unix box to generate a keytab from the Unix
box's computer account in AD.
* GSSAPIAuthentication yes in /etc/ssh/sshd_config
* A kerberized PuTTY such as Quest. I'm working on kerberizing
official PuTTY now I have the need, but other things are currently
taking precedence.
Owen
.
- Prev by Date: no password ssh
- Next by Date: Re: no password ssh
- Previous by thread: no password ssh
- Next by thread: allowing LocalForward but restricting RemoteForward
- Index(es):
Relevant Pages
|
|
