Arch Linux

itsuka1984

Member

Registered: 2024-07-14

Posts: 32

[solved]: archLinux domain authentication issue

ArchLinux domain successfully added: Execute command Itsuka@Arch ~]$ kinit account
Password for auccount@XXX.NET:
[Itsuka@Arch ~]$ klist
Ticket cache: FILE:/tmp/krb5cc_1000
Default principal: auccount@XXX.NET

Valid starting       Expires              Service principal
2024-07-14T15:35:18  2024-07-15T01:35:18  krbtgt/XXX@XXX.NET
        renew until 2024-07-15T15:35:13

[Itsuka@Arch ~]$ getent passwd account
xx*:1700333264:867400513:XX XX - local:/home/XX@XXX:/bin/bash

However, when logging into a domain account using the su account, it will prompt for authentication failure and confirm that the password is correct. How to solve this problem?

[Itsuka@Arch ~]$ su - account
password:
Su: Authentication failed

Last edited by itsuka1984 (2024-07-15 20:59:16)

progandy

Member

Registered: 2012-05-17

Posts: 5,317

Re: [solved]: archLinux domain authentication issue

Don't you need ksu instead of su?

---

| alias CUTF='LANG=en_XX.UTF-8@POSIX ' | alias ENGLISH='LANG=C.UTF-8 ' |

itsuka1984

Member

Registered: 2024-07-14

Posts: 32

Re: [solved]: archLinux domain authentication issue

Don't you need ksu instead of su?

I just need to be able to log in to my domain account,use account@domain.net or domain.net/account can't login at all

Lone_Wolf

Administrator

From: Netherlands, Europe

Registered: 2005-10-04

Posts: 15,083

Re: [solved]: archLinux domain authentication issue

Progandy has a lot of experience and his replies are worth considering .

Did you try with ksu ?

If not, please do and post the output.

---

Disliking systemd intensely, but not satisfied with alternatives so focusing on taming systemd.

clean chroot building not flexible enough ?
Try clean chroot manager by graysky

itsuka1984

Member

Registered: 2024-07-14

Posts: 32

Re: [solved]: archLinux domain authentication issue

Don't you need ksu instead of su?

[Itsuka@Arch ~]$ ksu account@domain.net
WARNING: Your password may be exposed if you enter it here and are logged
         in remotely using an unsecure (non-encrypted) channel.
Kerberos password for account@domain.net: :
ksu: KDC reply did not match expectations while getting initial credentials
Authentication failed.

itsuka1984

Member

Registered: 2024-07-14

Posts: 32

Re: [solved]: archLinux domain authentication issue

Progandy has a lot of experience and his replies are worth considering .

Did you try with ksu ?

If not, please do and post the output.

can't login

[Itsuka@Arch ~]$ ksu account@domain.net
WARNING: Your password may be exposed if you enter it here and are logged
         in remotely using an unsecure (non-encrypted) channel.
Kerberos password for account@domain.net: :
ksu: KDC reply did not match expectations while getting initial credentials
Authentication failed.

itsuka1984

Member

Registered: 2024-07-14

Posts: 32

Re: [solved]: archLinux domain authentication issue

Progandy has a lot of experience and his replies are worth considering .

Did you try with ksu ?

If not, please do and post the output.

Done!login successfully

Modify use_fully_qualifyd_names=Fasle in sssd.conf

thank you very much!!

itsuka1984

Member

Registered: 2024-07-14

Posts: 32

Re: [solved]: archLinux domain authentication issue

Progandy has a lot of experience and his replies are worth considering .

Did you try with ksu ?

If not, please do and post the output.

How should domain users use sudo permissions?

sudo vim /etc/sudoers.d/domain_sudoers

%domain.com ALL=(ALL:ALL) ALL

account ALL=(ALL:ALL) ALL

This method is not working！！help!

Lone_Wolf

Administrator

From: Netherlands, Europe

Registered: 2005-10-04

Posts: 15,083

Re: [solved]: archLinux domain authentication issue

Please prepend [Solved] to the thread title (and while you're at if also remove help: from the title) by editing the first post > subject .

One important remark :
if no one has answered since your last post and it has been just a short time , just edit the existing post instead of creating a new one.

Especailly if posts look very similar the signal to noise ratio decreases significantly, making it hard to see what's really happening .

Last edited by Lone_Wolf (2024-07-16 09:02:19)

---

Disliking systemd intensely, but not satisfied with alternatives so focusing on taming systemd.

clean chroot building not flexible enough ?
Try clean chroot manager by graysky

seth

Member

From: Won't reply 2 private help req

Registered: 2012-09-03

Posts: 75,939

Re: [solved]: archLinux domain authentication issue

https://askubuntu.com/questions/1114364 … main-group
https://www.deepl.com

---

How to upload text · How to boot w/o GUI · Disable Windows Fast-Start! · Fix your xinitrc

ewaller

Administrator

From: Pasadena, CA

Registered: 2009-07-13

Posts: 20,638

Re: [solved]: archLinux domain authentication issue

Closing this thread as it marked as solved

---

Nothing is too wonderful to be true, if it be consistent with the laws of nature -- Michael Faraday
The shortest way to ruin a country is to give power to demagogues.— Dionysius of Halicarnassus
---
How to Ask Questions the Smart Way