SSH sso with Active Directory

Hallo:

I’m using OpenSuse 11.2. I’ve joined it to Active Directory (using yast, windows domain member).

I try to sso with ssh, ftp, telnet, but I’m asked for password.

Please, can any tell me if it’s possible to do a SSO using Samba?

Thanks

torcaz99 wrote:
> Hallo:
>
> I’m using OpenSuse 11.2. I’ve joined it to Active Directory (using
> yast, windows domain member).
>
> I try to sso with ssh, ftp, telnet, but I’m asked for password.
>
> Please, can any tell me if it’s possible to do a SSO using Samba?
>
> Thanks

Just to be clear you need to identify exactly what you are doing.
The concept of single sign on usually means that from one host you
can get to other hosts without having to authenticate again.

Thus, you could be on a Windows host and your are using PuTTY or
SSH to go into a Linux box that is joined to the domain like
your Windows box is… if so, you need to state that.

Is that what you are trying to do? What does SSO mean to you?
What are you expecting/wanting? Be specific.

Thanks for your answer. I’ll try to detail.

I’ve my Opensuse 11.2 integrated with Active Directory (my computer is a client of a W2003 AD).

As I login with a user of AD, I should be able to connect to another services integrated with AD without having to type my username and password.

I’ve installed sshd, telnetd an vsftp. That services should allow me to do connect as SSO.

If you open “Yast - Windows Domain Member”, you will see an option which says “Sigle Sign-on for SSH”. That options is the one I want to use.

For ex: If I’m an Active Directory user something like:
$ ssh mycomputer.domain.com
should connect to my own computer without asking for username or password.

Any idea why this doesn’t work?

Thanks

I forgot to say that the error I receive is:

ebug1: Authentications that can continue: publickey,gssapi-with-mic,keyboard-interactive
debug1: Next authentication method: gssapi-with-mic
debug2: we sent a gssapi-with-mic packet, wait for reply
debug1: Authentications that can continue: publickey,gssapi-with-mic,keyboard-interactive
debug2: we sent a gssapi-with-mic packet, wait for reply
debug1: Authentications that can continue: publickey,gssapi-with-mic,keyboard-interactive
debug2: we sent a gssapi-with-mic packet, wait for reply
debug1: Authentications that can continue: publickey,gssapi-with-mic,keyboard-interactive
debug2: we did not send a packet, disable method
debug1: Next authentication method: publickey
debug1: