Kerberos authentication on HP-UX 11.0

[Steve Grantham]

Greetings to all:

I've been tasked with implementing kerberos-based authentication between our hp-ux boxes and a windows 2003 domain controller. The goal is for users on the unix boxes to authenticate against the windows KDC, with as little administrative overhead as possible on either windows or unix boxes. Does anyone know of a cookbook for making this work smoothly? I've been trying for 2 weeks without much success. Thanks in advance.

[Steven E. Protter]

Couple of notes.

Windows 2003 Server defaults to the latest v5 Kerobos implementation. If you want to user an earlier version, you need a hotfix from microsoft.

Your version of HP-UX really should be 11i v1 11.00 is getting a little long in the tooth.

Kerberos doc included here:
http://docs.hp.com/cgi-bin/otsearch/getfile?id=/hpux/11.0/index.html&searchterms=Kerberos%7cWindows%7c2003%7cHP-UX&queryid=20040929-102655

http://docs.hp.com/hpux/pdf/5187-2785.pdf

Unless you upgrade the HP-9000 server to the latest Keberos, you'll have issues, the error message will be meaningless and Microsoft won't help much.

Hotfix should be found at http://support.microsoft.com or http://download.microsoft.com

SEP

[Patrick Wallek · Accepted solution]

I found some documentation on Kerberos on docs.hp.com.

A couple that may be of some help to you:

Configuration Guide for Kerberos Client Products on HP-UX
http://docs.hp.com/hpux/onlinedocs/T1417-90006/T1417-90006.html

Configuration Guide for Kerberos Products on HP-UX
http://docs.hp.com/hpux/onlinedocs/J5849-90003/J5849-90003.html

HP-UX 11.0 docs:
(Scroll down the list until you find the Kerberos section.)
http://docs.hp.com/hpux/11.0/index.html

[Steve Grantham]

Thanks Steven and Patrick for your replies. As noted, I had worked on the kerberos authentication issue for 2 weeks without much success, although I had used the standard docs and the configuration seemed fairly simple. Coincidentally, my Windows DC/KDC crashed after I posted the query above, and I had to restore it to a clean state from a backup. And that resolved the kerberos problems I was having as well.

Never underestimate what a hard crash can do for a Windows server...

Thanks again,
Steve Grantham

[Steve Grantham]

Thanks Steven and Patrick for your replies. As noted, I had worked on the kerberos authentication issue for 2 weeks without much success, although I had used the standard docs and the configuration seemed fairly simple. Coincidentally, my Windows DC/KDC crashed after I posted the query above, and I had to restore it to a clean state from a backup. And that resolved the kerberos problems I was having as well.

Never underestimate what a hard crash can do for a Windows server...

Thanks again,
Steve Grantham