welcome: please sign in

Diff for "MemberManual/ShellAccess/PasswordlessLogin"

Differences between revisions 11 and 12
Revision 11 as of 2007-06-05 02:50:45
Size: 1641
Editor: AdamMegacz
Comment:
Revision 12 as of 2007-11-11 21:38:49
Size: 1642
Editor: bzq-84-108-20-56
Comment:
Deletions are marked like this. Additions are marked like this.
Line 2: Line 2:
Line 5: Line 4:
Then, you must obtain kerberos tickets. If your username is "fred", you would do this by typing
Line 6: Line 6:
Then, you must obtain kerberos tickets. If your username is "fred", you would do this by typing
Line 10: Line 9:
Line 14: Line 12:
Line 20: Line 19:
Line 21: Line 21:
   ssh -o 'GSSAPIAuthentication yes' -o 'GSSAPIDelegateCredentials yes' mire.hcoop.net    ssh -o 'GSSAPIAuthentication yes' -o 'GSSAPIDelegateCredentials yes' fred@mire.hcoop.net
Line 41: Line 41:
Line 43: Line 42:

How to log in to mire without typing your password

Zeroth, you must have openssh client 4.3 or later. Other versions may work, but we make no guarantees. You will also want the krb5-user package if you are using Debian or Ubuntu.

Then, you must obtain kerberos tickets. If your username is "fred", you would do this by typing

   kinit fred@HCOOP.NET

Then type your password when prompted. Note that you MUST capitalize HCOOP.NET and you MUST NOT capitalize your user name. This is important.

Next, make sure you have your tickets. To do this, type

   klist

You should see your tickets and their expiration dates.

Last, type

   ssh -o 'GSSAPIAuthentication yes' -o 'GSSAPIDelegateCredentials yes' fred@mire.hcoop.net

(GSSAPI is sort of like Kerberos. Don't worry about the difference at this point.)

If that doesn't work, add "-vvv" to the command line and copy and paste the ENTIRE output into an email to hcoop-discuss and we'll tell you what's up.

If you do this a lot, you can include the GSSAPIAuthentication and GSSAPIDelegateCredentials options in your .ssh/config file. But you should NOT turn on GSSAPIDelegateCredentials for arbitrary hosts (make sure you only enable it for HCOOP hosts). Here's what AdamMegacz uses:

Host deleuze.hcoop.net
  ForwardX11Trusted yes
  GSSAPIAuthentication yes
  GSSAPIDelegateCredentials yes
  User megacz_admin
Host mire.hcoop.net
  ForwardX11Trusted yes
  GSSAPIAuthentication yes
  GSSAPIDelegateCredentials yes
  User megacz_admin

If it doesn't work

See TroubleshootingKerberos

MemberManual/ShellAccess/PasswordlessLogin (last edited 2021-10-17 03:04:21 by RobinTempleton)