diff --git a/.etcfiles/krb5.conf b/.etcfiles/krb5.conf new file mode 100644 index 0000000..220083c --- /dev/null +++ b/.etcfiles/krb5.conf @@ -0,0 +1,14 @@ +[domain_realm] + .pdc.kth.se = NADA.KTH.SE + .chalmers.se = CHALMERS.SE + chalmers.se = CHALMERS.SE + +[appdefaults] + forwardable = yes + forward = yes + krb4_get_tickets = no + +[libdefaults] + default_realm = NADA.KTH.SE + dns_lookup_realm = true + dns_lookup_kdc = true diff --git a/.ssh/config b/.ssh/config new file mode 100644 index 0000000..c3d9700 --- /dev/null +++ b/.ssh/config @@ -0,0 +1,21 @@ +# Hosts we want to authenticate to with Kerberos +Host *.kth.se *.kth.se. +# User authentication based on GSSAPI is allowed +GSSAPIAuthentication yes +# Key exchange based on GSSAPI may be used for server authentication +GSSAPIKeyExchange yes +# Hosts to which we want to delegate credentials. Try to limit this to +# hosts you trust, and were you really have use for forwarded tickets. +Host *.csc.kth.se *.csc.kth.se. *.nada.kth.se *.nada.kth.se. *.pdc.kth.se *.pdc.kth.se. +# Forward (delegate) credentials (tickets) to the server. +GSSAPIDelegateCredentials yes +# Prefer GSSAPI key exchange +PreferredAuthentications gssapi-keyex,gssapi-with-mic + +Host beskow + Hostname beskow.pdc.kth.se + User fojt + +Host tegner + Hostname tegner.pdc.kth.se + User fojt