AIX 6100-03 Kerberos Authentication
 
*
Welcome, Guest. Please login or register. July 30, 2010, 11:56:31 AM


Login with username, password and session length


Pages: [1]   Go Down
  Print  
Author Topic: AIX 6100-03 Kerberos Authentication  (Read 1160 times)
0 Members and 1 Guest are viewing this topic.
Michael
Administrator
Hero Member
*****
Posts: 676


« Reply #2 on: November 18, 2009, 06:54:49 PM »

It certainly is different - I dont recall chuser removing them before - BUT - IBM might consider not removing a user when the registry changes to be a bug.

Have you tried setting the default stanza to look at Kerberos. Then AIX will look there for users.

Before you do that though - make sure you set root, and maybe other "local" accounts to the local files. i.e.

$ chuser registry=files SYSTEM=compat root

Michael
Logged
Maarten Visser
Full Member
***
Posts: 24


« Reply #1 on: November 18, 2009, 07:54:40 AM »

Hmm, i found out the when the chuser registry=.....  runs.
The stanza of the user is being removed from /etc/security/user  .
This is the reason why i can't remove the user anymore or change it's local password.
I hope this is a bug... i will make a PMR to IBM...
Logged
Maarten Visser
Full Member
***
Posts: 24


« on: November 17, 2009, 03:13:08 PM »

I just made a default new and complete install with AIX6100-03.
I installed the Kerberos Packages just as I do with AIX53 and made the config.krb5 settings
So far so good, I make a normal system account and then i do a:
chuser registry=KRB5Afiles SYSTEM=KRB5Afiles auth_domain=<domain> <user>

but then the sh*tload comes.
As root:
passwd <user> : you don't have permission to do this 
rmuser -p <user>  : user does not exist.

but "cat /etc/passwd" shows my user I just made. Authenticating isn't possible with the new user, not locally not through Kerberos.
The syslog shows me:  UNKNOW_USER tries to authenticate (sshd)

Any suggestions are welcome please...
Logged
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.10 | SMF © 2006-2009, Simple Machines LLC

Valid XHTML 1.0! Valid CSS! Dilber MC Theme by HarzeM
Page created in 0.51 seconds with 21 queries.



eXTReMe Tracker

Terms of Use and Privacy and Security Policies
Copyright 2001-2010 Michael Felt, John R Peck and ROOTVG.NET