Kerberos Server
pre setings
- DOMAIN
wok.lan
HOSTNAME
maria
div settings
cat /etc/hostname maria.wok.lan
cat /etc/hosts 127.0.0.1 localhost 192.168.242.3 maria maria.wok.lan
cat /etc/resolv.conf nameserver 192.168.244.151 search wok.lan
test
root@maria:~# host maria maria.wok.lan has address 192.168.242.3 root@maria:~# host 192.168.242.3 3.242.168.192.in-addr.arpa domain name pointer maria.wok.lan.
install
apt-get install krb5-kdc krb5-admin-server
make a newrealm
krb5_newrealm
hint
in a vrtualmachine you have to supply random data like this in a second console cat /dev/sda > /dev/urandom
note master key name
master key name 'K/M@WOK.LAN'
checking the ports
root@maria:~# netstat -4 -lntpu | egrep "kadmind|krb5kdc" tcp 0 0 0.0.0.0:749 0.0.0.0:* LISTEN 2598/kadmind tcp 0 0 0.0.0.0:464 0.0.0.0:* LISTEN 2598/kadmind udp 0 0 0.0.0.0:464 0.0.0.0:* 2598/kadmind udp 0 0 0.0.0.0:750 0.0.0.0:* 2583/krb5kdc udp 0 0 0.0.0.0:88 0.0.0.0:* 2583/krb5kdc
kadmin.local
create an admin account with name "kerberosadm"
root@maria:~# kadmin.local Authenticating as principal root/admin@WOK.LAN with password. kadmin.local: addprinc kerberosadm/admin WARNING: no policy specified for kerberosadm/admin@WOK.LAN; defaulting to no policy Enter password for principal "kerberosadm/admin@WOK.LAN": Re-enter password for principal "kerberosadm/admin@WOK.LAN": Principal "kerberosadm/admin@WOK.LAN" created. kadmin.local: exit
create an account with name "xinux"
root@maria:~# kadmin.local kadmin.local: addprinc xinux WARNING: no policy specified for xinux@WOK.LAN; defaulting to no policy Enter password for principal "xinux@WOK.LAN": Re-enter password for principal "xinux@WOK.LAN": Principal "xinux@WOK.LAN" created. kadmin.local: exit