ssh: Add ssh config and kerberos entries for beskow and tegner
This commit is contained in:
14
.etcfiles/krb5.conf
Normal file
14
.etcfiles/krb5.conf
Normal file
@@ -0,0 +1,14 @@
|
|||||||
|
[domain_realm]
|
||||||
|
.pdc.kth.se = NADA.KTH.SE
|
||||||
|
.chalmers.se = CHALMERS.SE
|
||||||
|
chalmers.se = CHALMERS.SE
|
||||||
|
|
||||||
|
[appdefaults]
|
||||||
|
forwardable = yes
|
||||||
|
forward = yes
|
||||||
|
krb4_get_tickets = no
|
||||||
|
|
||||||
|
[libdefaults]
|
||||||
|
default_realm = NADA.KTH.SE
|
||||||
|
dns_lookup_realm = true
|
||||||
|
dns_lookup_kdc = true
|
||||||
21
.ssh/config
Normal file
21
.ssh/config
Normal file
@@ -0,0 +1,21 @@
|
|||||||
|
# Hosts we want to authenticate to with Kerberos
|
||||||
|
Host *.kth.se *.kth.se.
|
||||||
|
# User authentication based on GSSAPI is allowed
|
||||||
|
GSSAPIAuthentication yes
|
||||||
|
# Key exchange based on GSSAPI may be used for server authentication
|
||||||
|
GSSAPIKeyExchange yes
|
||||||
|
# Hosts to which we want to delegate credentials. Try to limit this to
|
||||||
|
# hosts you trust, and were you really have use for forwarded tickets.
|
||||||
|
Host *.csc.kth.se *.csc.kth.se. *.nada.kth.se *.nada.kth.se. *.pdc.kth.se *.pdc.kth.se.
|
||||||
|
# Forward (delegate) credentials (tickets) to the server.
|
||||||
|
GSSAPIDelegateCredentials yes
|
||||||
|
# Prefer GSSAPI key exchange
|
||||||
|
PreferredAuthentications gssapi-keyex,gssapi-with-mic
|
||||||
|
|
||||||
|
Host beskow
|
||||||
|
Hostname beskow.pdc.kth.se
|
||||||
|
User fojt
|
||||||
|
|
||||||
|
Host tegner
|
||||||
|
Hostname tegner.pdc.kth.se
|
||||||
|
User fojt
|
||||||
Reference in New Issue
Block a user