Locked History Actions

Diff for "SshKerberos"

Differences between revisions 9 and 10
Revision 9 as of 2012-08-09 22:14:26
Size: 1485
Editor: akrevl
Comment:
Revision 10 as of 2012-08-09 22:14:45
Size: 1499
Editor: akrevl
Comment:
Deletions are marked like this. Additions are marked like this.
Line 7: Line 7:
=== Configure your OS === === 1. Configure your OS ===
Line 11: Line 11:
=== How to use it? === === 2. Use the Kerberos tools ===

SSH and Kerberos

This page describes how to tackle the issue of CS managed machines (e.g. hulk and rocky) not allowing you to login without a password via SSH.

1. Configure your OS

2. Use the Kerberos tools

Get a ticket

Whenever you would like to log in to CS managed machines (e.g. hulk, rocky) just open a terminal and enter:

kinit your_cs_id

This command will ask you for the password of your_cs_id and obtain a Kerberos ticket for the account your_cs_id. Now you can login to the CS managed machines without using a password (provided that you are logging in as your_cs_id, of course).

If you would like to manually specify the lifetime of the Kerberos ticket, you can do it with the -l switch:

kinit -l 30d johns

The command above will issue a ticket with a lifetime of 30 days for the username johns.

You can obtain a ticket for any username if you have a password for that usename (so my username is js on the local machine I can still obtain the ticket for my johns CS account).

Listing your tickets

You can list all of the tickets that you currently posses with the klist command:

klist

Deleting tickets

There may be a case when you do not need the Kerberos ticket any more and you want to delete. No problem, you can do this:

kdestroy