Configuring Kerberos Authentication on Linux

Depending on the Linux operating system being used, there are built in Kerberos packages, or packages may need to be installed. For more information, see the documentation for your Linux operating system:

• For Suse Linux, see the Configuring a Kerberos Client with Yast topic.
• For Ubuntu Linux, see the Kerberos Linux Client topic.
• For Centos/Red Hat, see the Configuring a Kerberos 5 Client topic.

In general, to obtain a Kerberos ticket, enter the following kinit command:

kinit -p user@REALM.TOP

where:

REALM

Is the unique domain name, which may be delineated by multiple intermediate domains and an endpoint domain.

TOP

Is the suffix COM, ORG, EDU, or other signifier.

After entering the kinit command, the operating system will prompt you for the principals password:

Password for myBDItest@MYREALM.TOP:

Specify the REALM password for the user, which may be different than the current user logon ID password.

The kinit command should return without an error message.

Enter the klist command to view the ticket:

Ticket cache: FILE:/tmp/krb5cc_0
Default principal: myBDItest@MYREALM.TOP

Valid starting     Expires            Service principal
11/22/16 09:19:22  11/22/16 13:18:40  krbtgt/ MYREALM.TOP @ MYREALM.TOP
renew until 11/22/16 13:19:22