July 25, 2008 04:14pm pdt

1. ahoffmann 17,960
2. ravenpl 14,150
3. omarfarid 12,500
4. hielo 11,000
5. Tintin 7,764
6. hernst42 5,200
7. Nopius 5,000
8. bansidhar 4,000
8. PeturIngiE... 4,000
8. sentner 4,000
11. gheist 3,800
12. batry_boy 3,750
13. DaveHowe 3,500
13. noci 3,500
15. Kdo 3,200

1. ahoffmann 42,066
2. omarfarid 22,000
3. Tintin 20,664
4. ravenpl 19,850
5. hielo 11,000
6. lrmoore 7,300
7. batry_boy 7,250
8. noci 7,200
9. hernst42 5,840
10. DaveHowe 5,500
11. dhoffman... 5,250
12. Nopius 5,000
13. svs 4,700
14. arrkerr1... 4,500
15. PeturIngiE... 4,000
15. Tolomir 4,000
15. duncan_roe 4,000
15. sentner 4,000
15. bansidhar 4,000

05.12.2008 at 08:00PM PDT, ID: 23396562

	[x] Attachment Details

[x]

The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

The Grade of the Solution
The Zone Rank of the Expert Providing the Solution
The Number of Author and Expert Comments
The Number of Experts Contributing
The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

6.7

Kerberos didn't work using ssh, ksu, rlogin

Zones: Networking Protocols, SSH / Telnet Software, E-Commerce Security

Tags: Kerberos, SSH, telnet

I have VPS server (zukinet.info) with Debian OS, i try to install kerberos as authentication system.
so far, i can get ticket when i run ssh on my vps server, but no on my windows xp client.

Based on Kerberos documentation on MIIT(http://web.mit.edu/Kerberos/krb5-1.6/krb5-1.6.3/doc/krb5-user.html), i've tried to use telnet, ssh, rlogin,rsh to prove if my Kerberos was work.

But , i didnt understand why the telnet, ssh, rlogin didn;t work (see Code snippet)
I run that ssh,telnet,rlogin,etc also on my vps server, i still not try from remote client (ex. windows xp) using LEASH, because it still appear error :

---------
"Ticket initialization failed.
Kerberos 5: cannot resolve network for KDC in requested realm (error 220)
Kerberos 4: Cannot contact Kerberos server for the selected realm
(Kerberos error 57)

Cannot contact the kerberos server for the selected realm)
(Kerberos error 57)"
-----------

I also tried to change user target ( not only root) but it doesnt work.
Anyone can help me ?

         
           
             1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:
58:
59:
60:
61:
62:
63:
64:
65:
66:
67:
68:
69:
70:
71:
72:
73:
74:
75:
76:
77:
78:
79:
80:

           
           
             Initial (getting ticket...  Successfull)
----------------------------------------
 
ifi@apa10000:~$ kinit root@ZUKINET.INFO
Password for root@ZUKINET.INFO:
ifi@apa10000:~$ 
 
Use Klist :
-----------
 
ifi@apa10000:~$ klist
Ticket cache: FILE:/tmp/krb5cc_1000_HSAPF25631
Default principal: root@ZUKINET.INFO
 
Valid starting     Expires            Service principal
05/13/08 02:36:47  05/13/08 12:36:47  krbtgt/ZUKINET.INFO@ZUKINET.INFO
        renew until 05/14/08 02:36:47
 
 
Kerberos 4 ticket cache: /tmp/tkt1000
klist: You have no tickets cached
ifi@apa10000:~$
 
 
Use Rlogin :
------------
 
ifi@apa10000:~$ rlogin zukinet.info -l root
connect to address 216.189.8.59 port 543: Connection refused
Trying krb4 rlogin...
connect to address 216.189.8.59 port 543: Connection refused
trying normal rlogin (/usr/bin/rlogin)
root@zukinet.info s password:   (still need password to use rlogin )
 
Use Telnet:
-----------
 
ifi@apa10000:~$ telnet zukinet.info -afx
Trying 216.189.8.59...
Connected to apa10000.zukinet.info (216.189.8.59).
Escape character is '^]'.
Waiting for encryption to be negotiated...
Negotiation of authentication, which is required for encryption,
has failed.  Good-bye.
 
Use Ksu:
--------
 
ifi@apa10000:~$ ksu root
ksu: Server not found in Kerberos database while geting credentials from kdc
Authentication failed.
ifi@apa10000:~$
 
My Kerberos Configuration (/etc/krb5.conf)  :
---------------------------------------------
 
[libdefaults]
        default_realm = ZUKINET.INFO
 
[realms]
        ZUKINET.INFO = {
                kdc = apa10000.zukinet.info:88
                admin_server = apa10000.zukinet.info:749
                default_domain = zukinet.info
        }
 
[domain_realm]
        zukinet.info = ZUKINET.INFO
        .zukinet.info = ZUKINET.INFO
 
[logging]
        kdc = FILE:/var/log/krb5kdc.log
        admin_server = FILE:/var/log/kadmin.log
        default = FILE:/var/log/krb5lib.log
 
My Hosts:
---------
 
127.0.0.1       localhost apa10000
216.189.8.59    zukinet.info apa10000.zukinet.info apa10000
           
         

Start your free trial to view this solution

Question Stats

Zone: Software

Question Asked By: zukinet

Solution Provided By: sentner

Participating Experts: 1

Solution Grade: B

Translate:

Loading Advertisement...

20080236-EE-VQP-29 / EE_QW_2_20070628