krb5-1.17.1 is released

2019-12-11 Thread Greg Hudson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 The MIT Kerberos Team announces the availability of MIT Kerberos 5 Release 1.17.1. Please see below for a list of some major changes included, or consult the README file in the source tree for a more detailed list of significant changes. RETRIEVING K

krb5-1.16.4 is released

2019-12-11 Thread Greg Hudson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 The MIT Kerberos Team announces the availability of MIT Kerberos 5 Release 1.16.4. Please see below for a list of some major changes included, or consult the README file in the source tree for a more detailed list of significant changes. RETRIEVING K

Re: Kerberos / krb5.conf / CentOS7

2019-12-11 Thread Todd Grayson
oops mistyped on the CAPATH example, it SHOULD read: (e.g. REALM A trusts REALM B, and REALM C trusts REALM B, but REALM A and REALM C do not trust each other) On Wed, Dec 11, 2019 at 7:16 PM Todd Grayson wrote: > Cross realm trust would involve setting up specific krbtgt principals that > repr

Re: Kerberos / krb5.conf / CentOS7

2019-12-11 Thread Todd Grayson
Cross realm trust would involve setting up specific krbtgt principals that represent the trusting realm and trusted realm, having proper realm entries present as well as proper domain_realm declarations in place. We cover the cross realm trust concept and command line steps between MIT realms as w

Re: Kerberos / krb5.conf / CentOS7

2019-12-11 Thread GemNEye
On 2019-12-11 18:52, Todd Grayson wrote: > The domain_realm section of the krb5.conf is used to map DNS domain names to > kerberos realms. So lets say you had an active directory domain (dns domain > and AD domain) of ad.example.com [1], its kerberos realm would be > AD.EXAMPLE.COM [2], but le

Re: Kerberos / krb5.conf / CentOS7

2019-12-11 Thread Todd Grayson
The domain_realm section of the krb5.conf is used to map DNS domain names to kerberos realms. So lets say you had an active directory domain (dns domain and AD domain) of ad.example.com, its kerberos realm would be AD.EXAMPLE.COM, but lets say your environment had linux servers in dev.example.com,

Kerberos / krb5.conf / CentOS7

2019-12-11 Thread GemNEye
I am trying to configure Kerberos, SSSD, SAMBA, SSSD on CentOS7 servers (without using winbind). I have had some success in getting everything to work, but after reviewing different docs found on the web my understanding of all the configurations is weak. In the /etc/krb5.conf file, what is th