{"id":2118,"date":"2013-01-15T06:29:33","date_gmt":"2013-01-14T21:29:33","guid":{"rendered":"http:\/\/borg4.vdomains.jp\/~goro\/diary\/?p=2118"},"modified":"2013-01-15T06:29:33","modified_gmt":"2013-01-14T21:29:33","slug":"os-x-server-%e3%81%a8-windows-8-%e3%81%a7-kerberos","status":"publish","type":"post","link":"http:\/\/borg4.vdomains.jp\/~goro\/diary\/2013\/2118","title":{"rendered":"OS X Server \u3068 Windows 8 \u3067 Kerberos"},"content":{"rendered":"<p>Windows 2000 \u3092\u4f7f\u3063\u3066\u3044\u305f(=PC \u3067\u30b2\u30fc\u30e0\u3092\u3084\u3063\u3066\u3044\u305f)\u9803\u306f NetBSD \u3067\u52d5\u3044\u3066\u305f Kerberos \u3092\u4f7f\u3063\u3066 Windows 2000 \u306e\u8a8d\u8a3c\u3092\u3057\u3066\u3044\u305f\u306e\u3067\u3001 OS X Server \u3067 Kerberos \u3092\u52d5\u304b\u3057\u3066\u308b\u4ee5\u4e0a\u306f Windows 8 \u3067\u3082\u540c\u3058\u3088\u3046\u306b\u8a8d\u8a3c\u3092\u3057\u305f\u3044\u3001\u3068\u9811\u5f35\u308b\u3053\u3068\u306b\u3057\u307e\u3057\u305f\u3002<br \/>\nOS X Server \u306e Kerberos \u306f <a href=\"http:\/\/www.h5l.org\/\">Heimdal<\/a> \u3092 Open Directory \u5bfe\u5fdc\u306b\u3055\u305b\u305f\u3082\u306e\u3089\u3057\u3044\u306e\u3067\u3061\u3083\u3093\u3068\u7528\u610f\u3055\u308c\u3066\u3044\u308b <a href=\"http:\/\/www.h5l.org\/manual\/HEAD\/info\/heimdal\/Configuring-Windows-to-use-a-Heimdal-KDC.html\">Configuring Windows to use a Heimdal KDC<\/a> \u3063\u3064\u30fc\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u306b\u5f93\u3063\u3066\u3055\u3063\u304f\u308a\u2026\u3060\u3051\u3069\u82e5\u5e72\u3072\u3063\u304b\u304b\u3063\u305f\u306e\u3067\u4e00\u5fdc\u30e1\u30e2\u3002\u3053\u306e\u60c5\u5831\u3092\u6b32\u3057\u3066\u305f\u4eba\u304c\u3044\u305f\u3089\u304a\u53cb\u9054\u306b\u306a\u308a\u305f\u3044\u306e\u3067 Twitter \u3067 @ \u98db\u3070\u3059\u304b\u77e2\u6587\u3067\u3054\u9023\u7d61\u304f\u3060\u3055\u3044 :)<\/p>\n<p><!--more--><br \/>\n\u306a\u304a\u3001\u6211\u304c\u5bb6\u306e\u74b0\u5883\u306f\u3053\u3093\u306a\u611f\u3058<\/p>\n<p style=\"padding-left: 30px;\">Kerberos Realm: HYRULE.JP<br \/>\nKDC: flora.hyrule.jp<br \/>\nWindows 8 \u30af\u30e9\u30a4\u30a2\u30f3\u30c8: reika.hyrule.jp<\/p>\n<p>\u307e\u305a\u306f OS X Server \u5074\u3067\u306e\u6e96\u5099\u3002\u30cd\u30c3\u30c8\u3067\u898b\u308c\u308b\u8cc7\u6599\u3067\u306f kadmin \u304b kadmin.local \u4f7f\u3063\u3066\u30b3\u30f3\u30d4\u30e5\u30fc\u30bf\u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u4f5c\u6210\u3068\u306a\u3063\u3066\u307e\u3057\u305f\u304c\u3001 OS X Server \u306e\u5834\u5408 kadmin.local \u306f obsolute \u306a\u306e\u3067 kadmin -l \u3092\u4f7f\u3046\u3001\u3068\u3002\u3067 krb5.keytab \u304c\u4e00\u822c\u30e6\u30fc\u30b6\u30fc\u3067\u306f\u30a2\u30af\u30bb\u30b9\u51fa\u6765\u306a\u3044\u306e\u3067 sudo \u3057\u3066\u5b9f\u884c\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u3001\u3068\u3044\u3046\u5177\u5408\u3002<\/p>\n<pre>goro@flora:$~ sudo kadmin -l\r\nkadmin&gt; ank --password=aoki host\/reika.hyrule.jp\r\nMax ticket life [unlimited]:\r\nMax renewable life [unlimited]:\r\nPrincipal expiration time [never]:\r\nPassword expiration time [never]:\r\nAttributes []:\r\nPolicy [default]:\r\nkadmin&gt; get host\/reika.hyrule.jp\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Principal: host\/reika.hyrule.jp@HYRULE.JP\r\n\u00a0\u00a0\u00a0 Principal expires: never\r\n\u00a0\u00a0\u00a0\u00a0 Password expires: never\r\n\u00a0Last password change: never\r\n\u00a0\u00a0\u00a0\u00a0\u00a0 Max ticket life: unlimited\r\n\u00a0\u00a0 Max renewable life: unlimited\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Kvno: 1\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Mkvno: unknown\r\nLast successful login: never\r\n\u00a0\u00a0\u00a0 Last failed login: never\r\n\u00a0\u00a0 Failed login count: 0\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Last modified: 2013-01-10 14:22:43 UTC\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Modifier: hdb\/od@WELL-KNOWN:OD-BACKEND\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Attributes:\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Keytypes: aes256-cts-hmac-sha1-96(pw-salt)[1], aes128-cts-hmac-sha1-96(pw-salt)[1], des3-cbc-sha1(pw-salt)[1]\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 PK-INIT ACL:\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Aliases:\r\n\r\nkadmin&gt;<\/pre>\n<p>\u6700\u521d\u306e ank \u3067\u30b3\u30f3\u30d4\u30e5\u30fc\u30bf\u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u4f5c\u6210\u3057\u3066\u3001\u6b21\u306e get \u3067\u4f5c\u6210\u3057\u305f\u5185\u5bb9\u3092\u78ba\u8a8d\u3002\u3088\u304f\u308f\u304b\u3093\u306a\u3044\u306e\u3067\u30c7\u30d5\u30a9\u30eb\u30c8\u306e\u307e\u307e\u6d41\u3057\u305f\u3093\u3060\u3051\u3069\u3001\u679c\u305f\u3057\u3066 expires \u304c never \u3067\u3044\u3044\u3093\u3060\u308d\u3046\u304b\u2026\u3002<br \/>\n\u7d9a\u3044\u3066 Windows 8\u3000\u3067\u4ee5\u4e0b\u306e\u3088\u3046\u306b\u3002\u3082\u3061\u308d\u3093\u7ba1\u7406\u8005\u3068\u3057\u3066\u30b3\u30de\u30f3\u30c9\u30d7\u30ed\u30f3\u30d7\u30c8\u3092\u5b9f\u884c\u3057\u306a\u3044\u3068\u30c0\u30e1\u3002\u4f59\u8ac7\u3060\u3051\u3069 Windows 8 \u3067\u7ba1\u7406\u8005\u3068\u3057\u3066\u30b3\u30de\u30f3\u30c9\u30d7\u30ed\u30f3\u30d7\u30c8\u3092\u5b9f\u884c\u3059\u308b\u306e\u306f Windows + x -&gt; a \u3068\u30bf\u30a4\u30d7\u3059\u308b\u306e\u304c\u4e00\u756a\u65e9\u3044\u304b\u306a\u3002<\/p>\n<pre>Microsoft Windows [Version 6.2.9200]\r\n(c) 2012 Microsoft Corporation. All rights reserved.\r\n\r\nC:\\Windows\\system32&gt;ksetup \/setdomain HYRULE.JP\r\nDNS \u30c9\u30e1\u30a4\u30f3\u3092\u8a2d\u5b9a\u3057\u3066\u3044\u307e\u3059\r\n\u6ce8\u610f: \/SetDomain \u6709\u52b9\u306b\u3059\u308b\u306b\u306f\u518d\u8d77\u52d5\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\r\n\r\nC:\\Windows\\system32&gt;ksetup \/addkdc HYRULE.JP flora.hyrule.jp\r\n\r\nC:\\Windows\\system32&gt;ksetup \/SetComputerPassword aoki\r\n\u30b3\u30f3\u30d4\u30e5\u30fc\u30bf\u30fc\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u6307\u5b9a\u3057\u3066\u3044\u307e\u3059\r\n\u6ce8\u610f: \/SetComputerPassword \u6709\u52b9\u306b\u3059\u308b\u306b\u306f\u518d\u8d77\u52d5\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\r\n\r\nC:\\Windows\\system32&gt;<\/pre>\n<p>\u3053\u3053\u3067\u4e00\u56de\u518d\u8d77\u52d5\u3057\u3066<\/p>\n<pre>C:\\Windows\\system32&gt;ksetup \/mapuser goro@HYRULE.JP goro\r\n\r\nC:\\Windows\\system32&gt;ksetup\r\n\u65e2\u5b9a\u306e\u9818\u57df = HYRULE.JP (\u5916\u90e8)\r\nHYRULE.JP:\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 kdc = flora.hyrule.jp\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u9818\u57df\u30d5\u30e9\u30b0 = 0x0\u9818\u57df\u30d5\u30e9\u30b0\u304c\u3042\u308a\u307e\u305b\u3093\r\ngoro@HYRULE.JP \u3092 goro \u306b\u30de\u30c3\u30d7\u3057\u3066\u3044\u307e\u3059\u3002\r\n\r\nC:\\Windows\\system32&gt;<\/pre>\n<p>\u3067\u5b8c\u4e86\u3002\u4e00\u56de\u30b5\u30a4\u30f3\u30a2\u30a6\u30c8\u3057\u3066\u304b\u3089\u5225\u306e\u30e6\u30fc\u30b6\u30fc\u3092\u6307\u5b9a\u3057\u3066 goro@HYRULE.JP \u3067\u5165\u308b\u3068\u76ee\u51fa\u5ea6\u304f HYRULE.JP \u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u4f7f\u3063\u3066\u30de\u30c3\u30d7\u3055\u308c\u305f REIKA\\goro \u3068\u3057\u3066\u30ed\u30b0\u30a4\u30f3\u3067\u304d\u308b\u306e\u3067\u3059\u3002<br \/>\n\u3053\u308c\u3067\u4f55\u304c\u5b09\u3057\u3044\u304b\u3068\u3044\u3046\u3068<\/p>\n<ul>\n<li>OS X Server \u306e\u5171\u6709\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306b\u30a2\u30af\u30bb\u30b9\u3067\u304d\u308b<\/li>\n<li>Thunderbird \u7b49\u306eGSSAPI\u306b\u5bfe\u5fdc\u3057\u305fMUA\u3067OS X Server \u306e\u30e1\u30fc\u30eb\u306e\u8aad\u307f\u66f8\u304d\u304c\u3067\u304d\u308b<\/li>\n<\/ul>\n<p>\u3050\u3089\u3044?<\/p>\n<p>\u305f\u3060\u3001\u3053\u306e\u5f71\u97ff\u3067\u30d4\u30af\u30c1\u30e3\u30d1\u30b9\u30ef\u30fc\u30c9\u304c\u4f7f\u3048\u306a\u304f\u306a\u3063\u3066\u3057\u307e\u3063\u305f\u306e\u304c\u56f0\u308a\u3082\u306e\u3002\u52d5\u4f5c\u3092\u898b\u3066\u308b\u3068\u3069\u3046\u3082\u30d4\u30af\u30c1\u30e3\u30d1\u30b9\u30ef\u30fc\u30c9\u304c kerberos \u306b\u5bfe\u5fdc\u3057\u3066\u306a\u3044\u3093\u3058\u3083\u306a\u3044\u304b\u3068\u601d\u3046\u3093\u3060\u3051\u3069\u3001\u3069\u3046\u306a\u3093\u3060\u308d\u3046\u3002<\/p>\n<p><a href=\"http:\/\/borg4.vdomains.jp\/~goro\/diary\/wp-content\/uploads\/2013\/01\/picturepassword_error.png\"><img loading=\"lazy\" decoding=\"async\" class=\"size-medium wp-image-2126 aligncenter\" alt=\"\u3069\u3046\u3057\u305f\u3082\u306e\u304b\u2026\" src=\"http:\/\/borg4.vdomains.jp\/~goro\/diary\/wp-content\/uploads\/2013\/01\/picturepassword_error-300x168.png\" width=\"300\" height=\"168\" srcset=\"http:\/\/borg4.vdomains.jp\/~goro\/diary\/wp-content\/uploads\/2013\/01\/picturepassword_error-300x168.png 300w, http:\/\/borg4.vdomains.jp\/~goro\/diary\/wp-content\/uploads\/2013\/01\/picturepassword_error-1024x575.png 1024w, http:\/\/borg4.vdomains.jp\/~goro\/diary\/wp-content\/uploads\/2013\/01\/picturepassword_error.png 1366w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>\u3068\u304b\u66f8\u3044\u3066\u308b\u9593\u306b\u4ee5\u4e0b\u306e\u65b9\u6cd5\u3067\u56de\u907f\u3067\u304d\u308b\u3053\u3068\u3092\u767a\u898b\u3002<\/p>\n<ol>\n<li>\u30e6\u30fc\u30b6\u30fc\u30de\u30c3\u30d4\u30f3\u30b0\u3092\u3059\u308b\u524d\u306b\u30d4\u30af\u30c1\u30e3\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u8a2d\u5b9a<\/li>\n<li>\u753b\u9762\u30ed\u30c3\u30af\u3057\u3066\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u4f7f\u3063\u3066\u30ed\u30c3\u30af\u3092\u89e3\u9664<\/li>\n<li>\u30e6\u30fc\u30b6\u30fc\u30de\u30c3\u30d4\u30f3\u30b0\u3092\u884c\u3046<\/li>\n<li>\u753b\u9762\u30ed\u30c3\u30af\u3059\u308b<\/li>\n<li>\u30d4\u30af\u30c1\u30e3\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u4f7f\u3063\u3066\u30ed\u30c3\u30af\u89e3\u9664<\/li>\n<li>\u30d1\u30b9\u30ef\u30fc\u30c9\u304c\u53e4\u3044\u3068\u6012\u3089\u308c\u308b\u306e\u3067 kerberos \u5074\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u5165\u529b<\/li>\n<\/ol>\n<p>\u3057\u304b\u3057\u76f8\u5909\u308f\u3089\u305a\u30b5\u30a4\u30f3\u30a4\u30f3\u30aa\u30d7\u30b7\u30e7\u30f3\u306e\u30d4\u30af\u30c1\u30e3\u30d1\u30b9\u30ef\u30fc\u30c9\u3067\u306f\u307e\u305a\u30ed\u30fc\u30ab\u30eb\u30a2\u30ab\u30a6\u30f3\u30c8\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u805e\u304b\u308c\u3066\u4e0a\u8a18\u306e\u30a8\u30e9\u30fc\u304c\u51fa\u3066\u308b\u306e\u3067\u3084\u3063\u3071\u308a Windows \u5074\u306e\u554f\u984c\u3063\u307d\u3044\u306a\u3041\u3002\u3053\u3093\u306a\u30a8\u30e9\u30fc\u3092\u8e0f\u3080\u4eba\u306f\u307b\u307c\u3044\u306a\u3044\u3068\u601d\u3046\u3051\u3069(\u7b11<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Windows 2000 \u3092\u4f7f\u3063\u3066\u3044\u305f(=PC \u3067\u30b2\u30fc\u30e0\u3092\u3084\u3063\u3066\u3044\u305f)\u9803\u306f NetBSD \u3067\u52d5\u3044\u3066\u305f Kerberos \u3092\u4f7f\u3063\u3066 Windows 2000 \u306e\u8a8d\u8a3c\u3092\u3057\u3066\u3044\u305f\u306e\u3067\u3001 OS X Server \u3067 Kerber [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[56,57,62,23,66],"class_list":["post-2118","post","type-post","status-publish","format-standard","hentry","category-misc","tag-kerberos","tag-open-directory","tag-os-x-server","tag-software","tag-windows"],"_links":{"self":[{"href":"http:\/\/borg4.vdomains.jp\/~goro\/diary\/wp-json\/wp\/v2\/posts\/2118","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/borg4.vdomains.jp\/~goro\/diary\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/borg4.vdomains.jp\/~goro\/diary\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/borg4.vdomains.jp\/~goro\/diary\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/borg4.vdomains.jp\/~goro\/diary\/wp-json\/wp\/v2\/comments?post=2118"}],"version-history":[{"count":24,"href":"http:\/\/borg4.vdomains.jp\/~goro\/diary\/wp-json\/wp\/v2\/posts\/2118\/revisions"}],"predecessor-version":[{"id":2143,"href":"http:\/\/borg4.vdomains.jp\/~goro\/diary\/wp-json\/wp\/v2\/posts\/2118\/revisions\/2143"}],"wp:attachment":[{"href":"http:\/\/borg4.vdomains.jp\/~goro\/diary\/wp-json\/wp\/v2\/media?parent=2118"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/borg4.vdomains.jp\/~goro\/diary\/wp-json\/wp\/v2\/categories?post=2118"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/borg4.vdomains.jp\/~goro\/diary\/wp-json\/wp\/v2\/tags?post=2118"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}