Cannot login from Linux client using SFU 3.5

[Guest]

This is a rookie question, but here goes. I want my Linux machines to use my
2K server Active Directory for authentication. I installed SFU 3.5 on my 2K
server. Went into AD and created then configured a user named Troy via the
Unix attributes tab. I created a group in AD called "linuxusers" which is now
Troy's group, and the NIS domain is set to "MYSERVER".

The problem? Using a non-root user, I can su to Troy in a terminal on the
Linux machine, but when it prompts for password, it fails with "su: Incorrect
Password". If I try to log in as Troy from the login UI, it fails with
"incorrect username or password." Is "troy" the correct username for me to
use? Should I be using "(e-mail address removed)" or something else?

I am only using NIS on my Linux client. I had tried Kerberos Authentication,
but that locked everyone out. I really WANT to use Kerberos though. I have
read the help,and can't figure out what I am supposed to do with Kerberos to
get it to work from my Linux client.

Any help would be appreciated.

 

[Chris Malone]

I dont believe SFU is going to give you cross-realm authentication
(though I have never used it)
You should have a look at:
http://www.microsoft.com/windows2000/techinfo/planning/security/kerbsteps.asp
...to use ktpass, ksetup etc so you can establish a cross-realm trust.
You will then be able to use Windows KDCs for your Linux clients.


chris