FC2 GUI login to W2K domain

[cjwilliss]

I have a W2K domain with AD. I have a FC2 workstation. I am attempting to configure the FC2 workstation to authenticate to the domain controller through Kerberos. My domain controller is the kdc. I have installed krb5-workstation on the FC2. I configured the /etc/krb5.conf file, on the FC2, with my domain information. On the DC, I setup the Ktpass to generate the keytab. When this keytab was generated, it was copied to the FC2. I ran the command ktutil and got the correct information. I have successfully used kinit and received a ticket from the KDC, so I know something is working correctly. I have verified that there is information in the pam and it is correct. (Note: I have found some information online about this procedure and am referring to this information for verification and confirmation of the contents of files and such.)

Now, one thing I have NOT been able to do is successfully authenticate to the W2K domain controller's KDC with the initial login GUI on the FC2 workstation. (Cannot login to the FC2 workstation using a W2K account.)

My question is ....... how do I do this? What configuration am I missing on either side?

Any suggestions or advise would be very helpful at this point!!

[rmenezes]

Why don´t you use LDAP instead of Kerberos?

[cjwilliss]

I suggested LDAP service, but Kerberos was requested!

Any suggestions for support on this would greatly appreciated!

[Jman]

Try Main Menu > System Settings > Authentication. On the Authentication tab, check Kerberos and configure it.

[cjwilliss]

Thanks for the information, Jman. Unfortunately, I have already found the Authentication Tab and have configured it.

I am able to successfully authenticate with "kinit" using Kerberos, but can not successfully use the initial GUI login. I end up having to use the local user account info instead of domain user account info.

Thanks for any suggestions!