From owner-freebsd-questions Mon Oct 28 15:19:19 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 94C2437B401 for ; Mon, 28 Oct 2002 15:19:18 -0800 (PST) Received: from kanga.honeypot.net (kanga.honeypot.net [208.162.254.122]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7BBEE43E7B for ; Mon, 28 Oct 2002 15:19:17 -0800 (PST) (envelope-from kirk@strauser.com) Received: from pooh.lan.honeypot.net (mail@pooh.lan.honeypot.net [10.0.1.2]) by kanga.honeypot.net (8.12.6/8.12.6) with ESMTP id g9SNJ20P013715 for ; Mon, 28 Oct 2002 17:19:02 -0600 (CST) (envelope-from kirk@strauser.com) Received: from kirk by pooh.lan.honeypot.net with local (Exim 3.36 #1 (Debian)) id 186J9x-0001CJ-00 for ; Mon, 28 Oct 2002 17:19:01 -0600 To: freebsd-questions@freebsd.org Subject: Kerberos is set up - now what? From: Kirk Strauser Date: 28 Oct 2002 17:19:01 -0600 Message-ID: <87pttukv8a.fsf@pooh.lan.honeypot.net> Lines: 19 X-Mailer: Gnus/5.09 (Gnus v5.9.0) Emacs/21.2 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG I'm trying to get some practical experience with Kerberos on my FreeBSD-4.7 server. I installed both versions from source by adding: MAKE_KERBEROS4= yes MAKE_KERBEROS5= yes to /etc/make.conf and building world. I followed some HOWTOs from the web and made a few principals to experiment with. Now that everything seems to be working, what are some good Kerberized services to experiment with? My goal for playing with Kerberos is building a single-login set of services; I'd like to log in to a workstation, and have ready access to mail, ftp, and logging in various Unix servers on my LAN. I don't have any specific need that I'm trying to meet, other than learning about a large-scale AAA system that I have no previous experience with. For starters, how do I configure sshd to allow Kerberos authentication? -- Kirk Strauser In Googlis non est, ergo non est. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message