Red Hat LINUX VIRTUAL SERVER 4.6 - ADMINISTRATION Instalační příručka stáhnout pdf (Strana 15)

This should display the list of keys available for the various combinations of principal names and

cipher suites. Run the Kerberos kinit command to authenticate the machine with the domain

controller using these keys:

sudo kinit -k MACHINE\$@REALM

The machine and realm names must be specified in uppercase, and the dollar sign ($) must be

escaped with a backslash (\) to prevent shell substitution. In some environments the DNS domain

name is different from the Kerberos realm name; ensure the realm name is used. If this command is

successful, no output will be displayed.

Check the TGT ticket for the machine account has been cached using:

sudo klist

Examine the machine account details using:

net ads status

4.6.1.8 Verify User Authentication

Use the wbinfo tool to verify that domain users can authenticate with the domain:

wbinfo --krb5auth=domain\\username%password

The domain specified here is the AD domain name, not the Kerberos realm name. For the bash

shell, the backslash (\) character must be escaped with another backslash. This command will return

a message indicating success or failure.

To verify that the Winbind PAM module is configured correctly, logon locally with a domain user

account that has not logged onto the machine previously.

ssh localhost -l domain\\username

id -u

Check that a corresponding Kerberos credential cache file was created for the uid returned by the

id -u command:

ls /tmp/krb5cc_uid

Check that the tickets in user’s Kerberos credential cache are valid and not expired:

klist

Exit the session:

exit

A similar test can be performed by logging on via Gnome Display Manager.

4.6.2 Quest Authentication Service

4.6.2.1 Configure Quest on Domain Controller

This assumes you have installed and configured the Quest software on the Windows domain

controllers, and have been granted administrative privileges to create computer objects in Active

Directory.

4.6.2.1.1 Enable Domain Users to Logon to Linux VDA Machines

For each domain user that needs to establish HDX sessions on a Linux VDA machine:

1 2 ... 10 11 12 13 14 15 16 17 18 19 20 ... 26 27

Žádné komentáře

Red Hat LINUX VIRTUAL SERVER 4.6 - ADMINISTRATION Instalační příručka Strana 15