kerberos is working well in my laptop. However, since the temp ticket file krb5*** is stored in /tmp which is cleaned up as reboot, I cannot use kinit -R to renew the ticket-granting ticket even within its renewable life. So what I do is to change /tmp cleanup frequency. How? edit the file:
/etc/default/rcS
and check the default value of "TMPTIME", 0 means cleanup as reboot. TMPTIME=14 means that the files in the directory will be deleted in a frequency of 2 weeks.
Showing posts with label kerberos. Show all posts
Showing posts with label kerberos. Show all posts
Monday, August 18, 2008
Linux: /tmp cleanup frequency
Saturday, July 26, 2008
linux:ssh:kerberos
Installing proper kereros and connecting with fermilab by ssh are always a bit tricky. Sometimes it needs old version openssh, sometimes it needs more... I don't know. One guy from Fermilab has a post talking about his experience based on ubuntu:
http://ubuntuforums.org/showthread.php?t=486284
I didn't follow his steps (since I just installed a new system, I need to install what I need). The basic idea is:
- install openssh (I installed newest one)
- install krb5
- sudo apt-get install krb5-user
- copy configure file (/etc/krb5.conf) from any computer of fermilab to your local computer (in the same location)
Although you could connect, please make sure you have right parameters both in ssh_config and sshd_config due to Fermilab security policy. I have a problem with it (once log in to one computer of clued0, I type klist, nothing found). I got the solution from kerberos-users of fnal:
===
Make sure your SSH client configuration in ssh_config (usually in /etc/ssh/)
contains the lines
GSSAPIAuthentication yes
GSSAPIDelegateCredentials yes
===
Subscribe to:
Posts (Atom)
