[skol]

Hello

I successfully could "register" my AIX system to the Windows AD with kerberos. After adding the AD-known user to the AIX I could loggin with this user with its AD-password via telnet.
My problem is now login with ssh.
Some of the users I don't want to authenticate by the AD and they have a local password.

If I have the following settings in the sshd.conf:
# Kerberos options
#KerberosAuthentication no
KerberosOrLocalPasswd yes
KerberosTicketCleanup yes
-> only the local users can login

If I have the following settings in the sshd.conf:
# Kerberos options
KerberosAuthentication yes
KerberosOrLocalPasswd yes
KerberosTicketCleanup yes
-> only the AD-known users can login

Can you help me with the settings, if I want some users login with there local password and some with the AD-password.

The user settings for the AD-Users are:
SYSTEM = KRB5Afiles
registry = KRB5Afiles

The local users are set with standard settings.

Thanks in advance for your help.
Regards
Stefan

[skol]

Hello

I found the solution myself.
I had to upgrade openssh from 4.1 to 4.3
openssh-4.3p2-r2

And the following options in the sshd_config file:

# Kerberos options
KerberosAuthentication yes
KerberosOrLocalPasswd yes
KerberosTicketCleanup yes
#KerberosGetAFSToken no

CU
Stefan