Re: Concurrent session per user support in Kerberos

2021-03-01 Thread hedrick
Yes. The Kerberos protocol simply allows users to get credentials and it provides a way for applications to check them. A user can have more than one credential at a time. Asssociating credential with a session is up to you. You can certainly store a credential in a session-specific place. > O

Re: kinit failing when AD user joining using smaercard PIN on ubuntu 20.04

2021-03-01 Thread Ken Hornstein
>We are login to Ubuntu 20.04 device using smartcard PIN. We are able to >login as AD user successfully. We are using Windows 2019 AD Server. So, I don't know what this means. I suspect that Kerberos isn't working correctly here and you'll falling back to something else. >We tried kinit manuall