Configuring ssh for kerberos

Question

Hi ,
I am using solaris 4.8 as my ssh server , Mac OS x 10.5 as ssh client and Mac OS X server as my KDC. I am newbie in solaris. I have successfully configured password less ssh with the help of GSSAPI authentication for ssh server on mac machine. But I am not getting any pointers for configuring ssh server in solaries for password less authenitcation using kerberos authentication.
For Mac and linux we can enable GSSAPI authentication in sshd_config file but can we do simillar thing in solaris also ?
Any pointers will be very helpful.

Answer 1

Are your client Mac Pros bound to your OD master?
Are you logging-in to the clients with OD accounts?
If both answers are yes, then type this in a Terminal window after logging-in to a client workstation with your OD account:
*kinit username*
(where 'username' is your OD username, you must be logged-in to the client with an OD account, then hit Return)
You should see this:
*Password for [email protected]:* (OD password goes here)
hit Return. then enter this next bit:
klist
and you should see something like this:
*Default principal: [email protected]*
*Valid starting Expires Service principal*
*03/15/08 17:40:28 03/16/08 03:40:34 krbtgt/[email protected] Renew until 03/16/08 17:40:28*
then enter:
*ssh servsername.psc.edu* (hit Return)
you should see your ssh banner (if configured) or just the standard 'Welcome to Darwin!' message.
More info can be found in the man files for klist and kinit.