ssh: Add ssh config and kerberos entries for beskow and tegner

This commit is contained in:
2019-12-10 14:07:15 +01:00
parent 88daa7e088
commit e8420af927
2 changed files with 35 additions and 0 deletions

14
.etcfiles/krb5.conf Normal file
View File

@@ -0,0 +1,14 @@
[domain_realm]
.pdc.kth.se = NADA.KTH.SE
.chalmers.se = CHALMERS.SE
chalmers.se = CHALMERS.SE
[appdefaults]
forwardable = yes
forward = yes
krb4_get_tickets = no
[libdefaults]
default_realm = NADA.KTH.SE
dns_lookup_realm = true
dns_lookup_kdc = true

21
.ssh/config Normal file
View File

@@ -0,0 +1,21 @@
# Hosts we want to authenticate to with Kerberos
Host *.kth.se *.kth.se.
# User authentication based on GSSAPI is allowed
GSSAPIAuthentication yes
# Key exchange based on GSSAPI may be used for server authentication
GSSAPIKeyExchange yes
# Hosts to which we want to delegate credentials. Try to limit this to
# hosts you trust, and were you really have use for forwarded tickets.
Host *.csc.kth.se *.csc.kth.se. *.nada.kth.se *.nada.kth.se. *.pdc.kth.se *.pdc.kth.se.
# Forward (delegate) credentials (tickets) to the server.
GSSAPIDelegateCredentials yes
# Prefer GSSAPI key exchange
PreferredAuthentications gssapi-keyex,gssapi-with-mic
Host beskow
Hostname beskow.pdc.kth.se
User fojt
Host tegner
Hostname tegner.pdc.kth.se
User fojt