Express Tips and Tricks

[#1]

The Centrify DirectControl package automatically installs Centrify's enhanced version of OpenSSH. However, you can configure the system to use stock SSH instead with the few simple steps demonstrated in this video.

[#2]

This information would be better as simple text, it is a little awkward as a video.

[#3]

I'm actually looking for the documentation on making passwordless SSH work with kerberos.

[#4]

First of all make sure the stock OpenSSH running on the machine does indeed have support for Kerberos by running the following command:

ldd /usr/sbin/sshd | grep -i kerberos

If the command returns no output then stock OpenSSH doesn't have the support. If it does proceed further to configure ssh server and ssh client for GSSAPI.

Edit sshd_config and set the following parameters:

GSSAPIKeyExchange yes
GSSAPIAuthentication yes
GSSAPICleanupCredentials yes

Restart the sshd server.

Edit ssh_config and set the following parameters:

GSSAPIAuthentication yes

------

if you have further questions, please open a new post under OpenSSH message board. 

Thanks

Sumana