VDSL mit Cisco Routern
kerberos und windows xp
Achtung kann üble Probleme machen.
OpenLDAP ppolicy
--- snip /etc/ldap/slapd.conf --- # ppolicy schema include /etc/ldap/schema/ppolicy.schema moduleload ppolicy.la overlay ppolicy ppolicy_default "cn=default,ou=PasswordPolicy,dc=patrick-preuss,dc=de" ppolicy_use_lockout --- snip /etc/ldap/slapd.conf --- --- snip default.ldif --- dn: cn=default,ou=PasswordPolicy,dc=patrick-preuss,dc=de objectClass: device objectClass: pwdPolicy objectClass: top cn: default pwdAttribute: userPassword pwdAllowUserChange: TRUE pwdCheckQuality: 1 pwdExpireWarning: 432000 pwdFailureCountInterval: 0 pwdGraceAuthNLimit: 0 pwdInHistory: 0 pwdLockout: FALSE pwdLockoutDuration: 1920 pwdMaxAge: 7516800 pwdMaxFailure: …
Krb5 und LDAP
http://www.ibm.com/developerworks/db2/library/techarticle/dm-0809govindarajan/ kadmin.local: modpol -maxlife 180days -minlife 1hours -minlength 6 -minclasses 2 -history 10 default http://www.ncsa.uiuc.edu/UserInfo/Resources/Software/kerberos/multiple_principals.html
MIT Kerberos change password
kadmin.local -q 'cpw -pw somethingsecert rt01krb5'
mDNS und OpenLDAP
Zur Zeit schein der slapd noch keine API zu avahi zu haben. Also doch ein wenig Handarbeit:-) Mein Docu.
Kerberos und LDAP II
Normalerweise werden die Kerberos Attribute unter "cn=Kerberos,..." gespeichert. Es ist möglich diese unter der "ou=People,...." in einem Account zu speichern.
Kerberos und IOS
Cisco IOS 12.2 Configuring Kerberos Cisco IOS 12.4 Configuring Kerberos Cisco IOS 12.4T Configuring Kerberos moria# kadmin.local -q 'addprinc -randkey host/ws-c2940-8tt-s.patrick-preuss.de' moria# kadmin.local -q 'ktadd -e DES-CBC-CRC:NORMAL -k /var/www/ios.keytab host/ws-c2940-8tt-s.patrick-preuss.de@PATRICK-PREUSS.DE' --- Cisco IOS 121-22.EA11 --- aaa authentication login default krb5-telnet local krb5 aaa authentication login console-override local aaa authorization exec default local krb5-instance kerberos local-realm …
Krb5 und LDAP
MIT Kerberos 1.6.3 The Rough Guide to configuring a Solaris KDC to use a LDAP DS for the KDB # rm /etc/krb5kdc/kdc.conf # ln -s /etc/krb5.conf /etc/krb5kdc/kdc.conf --- /etc/krb5.conf --- [kdcdefaults] kdc_ports = 750,88 [libdefaults] default_realm = PATRICK-PREUSS.DE default_tgs_enctypes = des-cbc-crc default_tkt_enctypes = des-cbc-crc [realms] PATRICK-PREUSS.DE = { kdc = moria admin_server = moria acl_file …
LDAP Authentication unter debain
Zur Docu.
Patrick Marc's Networks 