Project: datamanagement
Issue DM-2277: Document HOW-TO setup-up krb5 for easy cluster access
{code:bash} su aptitude install krb5-user # edit /etc/krb5.conf w.r.t ccage one # then as desktop user kinit ssh ccqservxxx {code} /etc/krb5.conf {code:bash} [libdefaults]	default_realm = IN2P3.FR ...	allow_weak_crypto = true ... [realms]	IN2P3.FR = {	kdc = kerberos-1.in2p3.fr:88	kdc = kerberos-2.in2p3.fr:88	kdc = kerberos-3.in2p3.fr:88	master_kdc = kerberos-admin.in2p3.fr:88	admin_server = kerberos-admin.in2p3.fr	kpasswd_server = kerberos-admin.in2p3.fr	default_domain = in2p3.fr {code} sshconfig: {code:bash} Host ccqservbuild GSSAPIAuthentication yes GSSAPIDelegateCredentials yes ForwardX11 yes HostName ccqservbuild.in2p3.fr #ProxyCommand ssh -W %h:%p cc Host ccqserv1* GSSAPIAuthentication yes GSSAPIDelegateCredentials yes ForwardX11 yes HostName %h.in2p3.fr ProxyCommand ssh -W %h:%p ccqservbuild {code}
Story points: 2