[solved]: Login issue using domain account

itsuka1984 · 2024-07-15 23:56:58

Moderator note: I have combined two threads into one. Sorry for any confusion

I want to log in to the system with a domain account now, but I keep getting a password error message. The actual password is correct.

I can switch to a domain account using ksu, but I cannot directly log in to the system using a domain account!!! Please help me！！

[Itsuka@Arch ~]$ kinit account
Password for account@ARCH.NET:
[Itsuka@Arch ~]$ klist
Ticket cache: FILE:/tmp/krb5cc_1000
Default principal: account@ARCH.NET

Valid starting Expires Service principal
07/16/2024 07:44:53 07/16/2024 17:44:53 krbtgt/ARCH@ARCH.NET
renew until 07/23/2024 07:44:48
[Itsuka@Arch ~]$ ksu account
Authenticated account@ARCH.NET
Account account: authorization for account@ARCH.NET successful
Changing uid to account (1700333264)
[account@Arch Itsuka]$ sudo ls

Last edited by itsuka1984 (2024-07-23 00:39:04)

Funny0facer · 2024-07-16 05:13:19

i can't help you, but please use code brackets for your terminal output.

itsuka1984 · 2024-07-16 05:19:12

Funny0facer wrote:

i can't help you, but please use code brackets for your terminal output.

Okay,how to log in to the system directly using a domain account? is it possible to log in to the system directly using a domain account after booting up?

schard · 2024-07-16 05:41:23

As the desired user:

sudo -l

As root:

cat /etc/sudoers
cat /etc/sudoers.d/*

itsuka1984 · 2024-07-16 06:45:40

schard wrote:

As the desired user:
sudo -l
As root:
cat /etc/sudoers
cat /etc/sudoers.d/*

Hi,how to log in to the system directly using a domain account? is it possible to log in to the system directly using a domain account after booting up?

Ferdinand · 2024-07-16 08:11:09

@itsuka1984, schard is trying to help you, but he needs to see the output from the three commands.

The first gives just a few lines of output, but the other two are longer, so it may be good to use a pastebin service.

Just run the commands - the first as your normal user, and the other two as root - and pipe into curl -F 'file=@-' 0x0.st, like it says in the pastebin link above, and then post the returned URL's.

itsuka1984 · 2024-07-16 08:50:38

schard wrote:

As the desired user:
sudo -l
As root:
cat /etc/sudoers
cat /etc/sudoers.d/*

[Itsuka@Arch ~]$ sudo -l
[sudo] password for Itsuka:
User Itsuka may run the following commands on Arch:
(ALL : ALL) ALL

[Itsuka@Arch ~]$ sudo cat /etc/sudoers
## sudoers file.
##
## This file MUST be edited with the 'visudo' command as root.
## Failure to use 'visudo' may result in syntax or file permission errors
## that prevent sudo from running.
##
## See the sudoers man page for the details on how to write a sudoers file.
##

##
## Host alias specification
##
## Groups of machines. These may include host names (optionally with wildcards),
## IP addresses, network numbers or netgroups.
# Host_Alias WEBSERVERS = www1, www2, www3

##
## User alias specification
##
## Groups of users. These may consist of user names, uids, Unix groups,
## or netgroups.
# User_Alias ADMINS = millert, dowdy, mikef

##
## Cmnd alias specification
##
## Groups of commands. Often used to group related commands together.
# Cmnd_Alias PROCESSES = /usr/bin/nice, /bin/kill, /usr/bin/renice, \
# /usr/bin/pkill, /usr/bin/top
#
# Cmnd_Alias REBOOT = /sbin/halt, /sbin/reboot, /sbin/poweroff
#
# Cmnd_Alias DEBUGGERS = /usr/bin/gdb, /usr/bin/lldb, /usr/bin/strace, \
# /usr/bin/truss, /usr/bin/bpftrace, \
# /usr/bin/dtrace, /usr/bin/dtruss
#
# Cmnd_Alias PKGMAN = /usr/bin/apt, /usr/bin/dpkg, /usr/bin/rpm, \
# /usr/bin/yum, /usr/bin/dnf, /usr/bin/zypper, \
# /usr/bin/pacman

##
## Defaults specification
##
## You may wish to keep some of the following environment variables
## when running commands via sudo.
##
## Locale settings
# Defaults env_keep += "LANG LANGUAGE LINGUAS LC_* _XKB_CHARSET"
##
## Run X applications through sudo; HOME is used to find the
## .Xauthority file. Note that other programs use HOME to find
## configuration files and this may lead to privilege escalation!
# Defaults env_keep += "HOME"
##
## X11 resource path settings
# Defaults env_keep += "XAPPLRESDIR XFILESEARCHPATH XUSERFILESEARCHPATH"
##
## Desktop path settings
# Defaults env_keep += "QTDIR KDEDIR"
##
## Allow sudo-run commands to inherit the callers' ConsoleKit session
# Defaults env_keep += "XDG_SESSION_COOKIE"
##
## Uncomment to enable special input methods. Care should be taken as
## this may allow users to subvert the command being run via sudo.
# Defaults env_keep += "XMODIFIERS GTK_IM_MODULE QT_IM_MODULE QT_IM_SWITCHER"
##
## Uncomment to use a hard-coded PATH instead of the user's to find commands
# Defaults secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
##
## Uncomment to restore the historic behavior where a command is run in
## the user's own terminal.
# Defaults !use_pty
##
## Uncomment to send mail if the user does not enter the correct password.
# Defaults mail_badpass
##
## Uncomment to enable logging of a command's output, except for
## sudoreplay and reboot. Use sudoreplay to play back logged sessions.
## Sudo will create up to 2,176,782,336 I/O logs before recycling them.
## Set maxseq to a smaller number if you don't have unlimited disk space.
# Defaults log_output
# Defaults!/usr/bin/sudoreplay !log_output
# Defaults!/usr/local/bin/sudoreplay !log_output
# Defaults!REBOOT !log_output
# Defaults maxseq = 1000
##
## Uncomment to disable intercept and log_subcmds for debuggers and
## tracers. Otherwise, anything that uses ptrace(2) will be unable
## to run under sudo if intercept_type is set to "trace".
# Defaults!DEBUGGERS !intercept, !log_subcmds
##
## Uncomment to disable intercept and log_subcmds for package managers.
## Some package scripts run a huge number of commands, which is made
## slower by these options and also can clutter up the logs.
# Defaults!PKGMAN !intercept, !log_subcmds

##
## Runas alias specification
##

##
## User privilege specification
##
root ALL=(ALL:ALL) ALL

## Uncomment to allow members of group wheel to execute any command
%wheel ALL=(ALL:ALL) ALL

%domain^htian3 ALL=(ALL:ALL) ALL
## Same thing without a password
# %wheel ALL=(ALL:ALL) NOPASSWD: ALL

## Uncomment to allow members of group sudo to execute any command
# %sudo ALL=(ALL:ALL) ALL

## Uncomment to allow any user to run sudo if they know the password
## of the user they are running the command as (root by default).
# Defaults targetpw # Ask for the password of the target user
# ALL ALL=(ALL:ALL) ALL # WARNING: only use this together with 'Defaults targetpw'

## Read drop-in files from /etc/sudoers.d
@includedir /etc/sudoers.d

[Itsuka@Arch ~]$ sudo cat /etc/sudoers.d/*
cat: '/etc/sudoers.d/*': No such file or directory

Ferdinand · 2024-07-16 10:53:32

That should do it.

But did you notice the earlier comment:

Funny0facer wrote:

...please use code brackets for your terminal output.

He's refering to the BBCode for displaying source code (or any text file) - it switches to a fixed font and makes it a lot easier to read.

Try editing your last post and place the output from the three commands inside [code] [/code] tags, and you'll see how it improves readability

seth · 2024-07-16 15:14:21

1. code tags
2. remove the pathetic and redundant pleas for help
3. cut down the exclamation points

4. What are you trying to do here (and your other thread) at all? Apparently the goalpost of this thread has shifted and this now has nothing to do w/ sudo anymore. Also that doesn't look like the domain principal and you originally seem to have issued the wrong password.
Do you understand what kerberos is? Have you read https://wiki.archlinux.org/title/Kerberos ?
Lay out your fundamental intentions in simple terms that you truely understand, not what you believe should happen.

itsuka1984 · 2024-07-17 07:41:52

seth wrote:

1. code tags
2. remove the pathetic and redundant pleas for help
3. cut down the exclamation points
4. What are you trying to do here (and your other thread) at all? Apparently the goalpost of this thread has shifted and this now has nothing to do w/ sudo anymore. Also that doesn't look like the domain principal and you originally seem to have issued the wrong password.
Do you understand what kerberos is? Have you read https://wiki.archlinux.org/title/Kerberos ?
Lay out your fundamental intentions in simple terms that you truely understand, not what you believe should happen.

I got it,anyway thank you!

itsuka1984 · 2024-07-17 10:08:45

After join the domain, use ksu command to switch to the domain account, but how to map the domain account to the local user group?

seth · 2024-07-17 14:35:25

https://blog.oddbit.com/post/2015-07-16 … o-kerbero/

This is your third post on the topic, you've abandoned the other ones and moved on, but never clarified on your intentions, but rather shifted the goal around.
If you want more comments, you'll have to break that habit.

ewaller · 2024-07-17 15:20:07

itsuka1984: I have combined your two active threads from today. I closed the one you had from a week or so ago as it was tagged as solved.

I ask what other members and moderators have asked.

Fix your posts. Use BBCODE code tags around program output and file contents. https://bbs.archlinux.org/help.php#bbcode
There is a link to BBCode under each message post box on the forums.

Answer questions fully. Do not pick and choose what you think are important. We ask a lot of diagnostic questions.

There may be an issue if English is not your first language. That is fine, we can work with you on that. If it is a problem, let us know so we can adjust our style.

Do not cross post. Keep conversation about a single topic in a single thread. Yes, your three threads are all close enough in scope that they are a single topic.

Please work with us. Otherwise, consider this a warning.

itsuka1984 · 2024-07-18 23:54:39

seth wrote:

https://blog.oddbit.com/post/2015-07-16 … o-kerbero/
This is your third post on the topic, you've abandoned the other ones and moved on, but never clarified on your intentions, but rather shifted the goal around.
If you want more comments, you'll have to break that habit.

Sorry,I don't know if it's due to different distribution versions,according to the guidance you provided, I have tried multiple times but have not been successful!!

seth · 2024-07-19 06:49:29

https://bbs.archlinux.org/viewtopic.php?id=57855

seth wrote:

4. What are you trying to do here (and your other thread) at all? Apparently the goalpost of this thread has shifted and this now has nothing to do w/ sudo anymore. Also that doesn't look like the domain principal and you originally seem to have issued the wrong password.
Do you understand what kerberos is? Have you read https://wiki.archlinux.org/title/Kerberos ?
Lay out your fundamental intentions in simple terms that you truely understand, not what you believe should happen.

Also, again: https://deepl.com/

itsuka1984 · 2024-07-19 07:08:26

The functionality I'm trying to achieve is: logging in to archlinux using a domain account!!thx

itsuka1984 · 2024-07-19 07:09:38

seth wrote:

https://bbs.archlinux.org/viewtopic.php?id=57855
seth wrote:
4. What are you trying to do here (and your other thread) at all? Apparently the goalpost of this thread has shifted and this now has nothing to do w/ sudo anymore. Also that doesn't look like the domain principal and you originally seem to have issued the wrong password.
Do you understand what kerberos is? Have you read https://wiki.archlinux.org/title/Kerberos ?
Lay out your fundamental intentions in simple terms that you truely understand, not what you believe should happen.
Also, again: https://deepl.com/

The functionality I'm trying to achieve is: logging in to archlinux using a domain account!

seth · 2024-07-19 07:13:31

Please read the link I posted.

logging in from where?
ksu worked, right? So what't the problem?
What did you *actually* try wrt the user mapping, what were the *actual* errors you received?

I get that you probably don't speak english at all, but deepl.com does and from your nick, it also speaks your native tongue.

itsuka1984 · 2024-07-19 07:43:56

seth wrote:

Please read the link I posted.
logging in from where?
ksu worked, right? So what't the problem?
What did you *actually* try wrt the user mapping, what were the *actual* errors you received?
I get that you probably don't speak english at all, but deepl.com does and from your nick, it also speaks your native tongue.

Log on to the system using a domain account instead of switching using ksu！

Yes, I don't speak English, but that doesn't stop me from loving Archlinux!

Last edited by itsuka1984 (2024-07-19 07:49:07)

seth · 2024-07-19 07:47:48

This is going absolutely nowhere.

itsuka1984 · 2024-07-19 07:57:30

seth wrote:

This is going absolutely nowhere.

Okay,I got it,I'm using sudo with a domain account, but it keeps telling me that the password is wrong, and now I can only use sudo if I add the domain user ALL=(ALL:ALL) NOPASSWD: ALL to sudoers, so how do I fix this?

itsuka1984 · 2024-07-23 00:37:23

seth wrote:

This is going absolutely nowhere.

After a few days of constant testing to find relevant information, finally realized the system with a domain account to log in, facts prove that ubuntu, fedora can be achieved archlinux can also be achieved, just not the same way!

itsuka1984 · 2024-07-23 00:38:29

ewaller wrote:

itsuka1984: I have combined your two active threads from today. I closed the one you had from a week or so ago as it was tagged as solved.
I ask what other members and moderators have asked.
Fix your posts. Use BBCODE code tags around program output and file contents. https://bbs.archlinux.org/help.php#bbcode
There is a link to BBCode under each message post box on the forums.
Answer questions fully. Do not pick and choose what you think are important. We ask a lot of diagnostic questions.
There may be an issue if English is not your first language. That is fine, we can work with you on that. If it is a problem, let us know so we can adjust our style.
Do not cross post. Keep conversation about a single topic in a single thread. Yes, your three threads are all close enough in scope that they are a single topic.
Please work with us. Otherwise, consider this a warning.

Finally, thanks to all, the problem has been solved

Arch Linux

#1 2024-07-15 23:56:58

[solved]: Login issue using domain account

#2 2024-07-16 05:13:19

Re: [solved]: Login issue using domain account

#3 2024-07-16 05:19:12

Re: [solved]: Login issue using domain account

#4 2024-07-16 05:41:23

Re: [solved]: Login issue using domain account

#5 2024-07-16 06:45:40

Re: [solved]: Login issue using domain account

#6 2024-07-16 08:11:09

Re: [solved]: Login issue using domain account

#7 2024-07-16 08:50:38

Re: [solved]: Login issue using domain account

#8 2024-07-16 10:53:32

Re: [solved]: Login issue using domain account

#9 2024-07-16 15:14:21

Re: [solved]: Login issue using domain account

#10 2024-07-17 07:41:52

Re: [solved]: Login issue using domain account

#11 2024-07-17 10:08:45

Re: [solved]: Login issue using domain account

#12 2024-07-17 14:35:25

Re: [solved]: Login issue using domain account

#13 2024-07-17 15:20:07

Re: [solved]: Login issue using domain account

#14 2024-07-18 23:54:39

Re: [solved]: Login issue using domain account

#15 2024-07-19 06:49:29

Re: [solved]: Login issue using domain account

#16 2024-07-19 07:08:26

Re: [solved]: Login issue using domain account

#17 2024-07-19 07:09:38

Re: [solved]: Login issue using domain account

#18 2024-07-19 07:13:31

Re: [solved]: Login issue using domain account

#19 2024-07-19 07:43:56

Re: [solved]: Login issue using domain account

#20 2024-07-19 07:47:48

Re: [solved]: Login issue using domain account

#21 2024-07-19 07:57:30

Re: [solved]: Login issue using domain account

#22 2024-07-23 00:37:23

Re: [solved]: Login issue using domain account

#23 2024-07-23 00:38:29

Re: [solved]: Login issue using domain account

Board footer