ssh: Add ssh config and kerberos entries for beskow and tegner
This commit is contained in:
14
.etcfiles/krb5.conf
Normal file
14
.etcfiles/krb5.conf
Normal file
@@ -0,0 +1,14 @@
|
||||
[domain_realm]
|
||||
.pdc.kth.se = NADA.KTH.SE
|
||||
.chalmers.se = CHALMERS.SE
|
||||
chalmers.se = CHALMERS.SE
|
||||
|
||||
[appdefaults]
|
||||
forwardable = yes
|
||||
forward = yes
|
||||
krb4_get_tickets = no
|
||||
|
||||
[libdefaults]
|
||||
default_realm = NADA.KTH.SE
|
||||
dns_lookup_realm = true
|
||||
dns_lookup_kdc = true
|
||||
21
.ssh/config
Normal file
21
.ssh/config
Normal file
@@ -0,0 +1,21 @@
|
||||
# Hosts we want to authenticate to with Kerberos
|
||||
Host *.kth.se *.kth.se.
|
||||
# User authentication based on GSSAPI is allowed
|
||||
GSSAPIAuthentication yes
|
||||
# Key exchange based on GSSAPI may be used for server authentication
|
||||
GSSAPIKeyExchange yes
|
||||
# Hosts to which we want to delegate credentials. Try to limit this to
|
||||
# hosts you trust, and were you really have use for forwarded tickets.
|
||||
Host *.csc.kth.se *.csc.kth.se. *.nada.kth.se *.nada.kth.se. *.pdc.kth.se *.pdc.kth.se.
|
||||
# Forward (delegate) credentials (tickets) to the server.
|
||||
GSSAPIDelegateCredentials yes
|
||||
# Prefer GSSAPI key exchange
|
||||
PreferredAuthentications gssapi-keyex,gssapi-with-mic
|
||||
|
||||
Host beskow
|
||||
Hostname beskow.pdc.kth.se
|
||||
User fojt
|
||||
|
||||
Host tegner
|
||||
Hostname tegner.pdc.kth.se
|
||||
User fojt
|
||||
Reference in New Issue
Block a user