Kevin
asked on
SSSD - Automatic kerberos ticket initialization
When using SSSD for AD intergration, is there a way to automatically obtain a Kerberos ticket through PAM or GSSAPI on login? There is an option to just run kinit to obtain the ticket, but I'm trying to avoid having user enter their password a second time. I was able to GSSAPI auth to get to localhost, so I know I am was able to get in with the proper ticket. I know that Kerberos has 'forwardable' tickets, but I don't know how to force it to give you one when you log in.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.