{"id":2550,"date":"2014-01-15T22:10:58","date_gmt":"2014-01-15T13:10:58","guid":{"rendered":"http:\/\/borg4.vdomains.jp\/~goro\/diary\/?p=2550"},"modified":"2014-01-15T22:10:58","modified_gmt":"2014-01-15T13:10:58","slug":"os-x-server-3-0-%e3%81%ae-kerberosservices","status":"publish","type":"post","link":"https:\/\/borg4.vdomains.jp\/~goro\/diary\/2014\/2550","title":{"rendered":"OS X Server 3.0 \u306e KerberosServices"},"content":{"rendered":"

\u6211\u304c\u5bb6\u306e OS X Server \u3092 Mavericks\/OS X Server 3.0 \u306b\u3042\u3052\u305f\u6642<\/a>\u306b<\/p>\n

Dovecot \u304c GSSAPI \u3067\u8a8d\u8a3c\u3057\u306a\u3044<\/p><\/blockquote>\n

\u3068\u66f8\u3044\u305f\u3088\u3046\u306b\u3001 Mountain Lion\/OS X Server 2.0 \u3067\u306f\u3067\u304d\u3066\u305f SSO \u304c\u51fa\u6765\u306a\u304f\u306a\u3063\u3066\u307e\u3057\u305f\u3002\u3082\u3046\u3057\u3087\u3093\u307c\u308a\u3002<\/p>\n

\u3067\u3001\u305a\u3063\u3068\u305d\u306e\u307e\u307e\u3067\u653e\u7f6e\u3057\u3066\u305f\u3093\u3067\u3059\u304c\u3001\u5225\u4ef6\u3067\u8abf\u3079\u3066\u305f VMware<\/a> \u306e KB \u306b Installing OS X 10.9 Mavericks as a guest operating system in VMware Fusion 6.0 (2056603)<\/a> \u306a\u3093\u3066\u306e\u304c\u516c\u958b\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u306b\u6c17\u3065\u304d\u307e\u3057\u3066\u3001 VMware Fusion<\/a> \u306b Mavericks\/OS X Server 3.0 \u5165\u308c\u308c\u3070\u3044\u308d\u3044\u308d\u5b9f\u9a13\u51fa\u6765\u308b\u3093\u3058\u3083\u306d\u3001\u3068\u304b\u601d\u3044\u3064\u3044\u3066\u8a66\u3057\u305f\u306e\u3067\u3059\u3002<\/p>\n

<\/p>\n

\u3068\u3001\u305d\u306e\u524d\u306b\u73fe\u72b6\u78ba\u8a8d\u306e\u5fc5\u8981\u304c\u3042\u308b\u306e\u3067\u3001\u52d5\u3044\u3066\u306a\u3044\u672c\u756a\u30b5\u30fc\u30d0\u30fc\u3067 sso_util(8)<\/a><\/p>\n

sudo \/usr\/sbin\/sso_util info -l\r\nPassword:\r\nafpserver\r\ncifs\r\nhost\r\nvnc<\/pre>\n
\u305d\u308a\u3083\u3042 Dovecot \u3067 SSO \u51fa\u6765\u306a\u3044\u3088\u306d\u3063\u3066\u611f\u3058\u306e\u51fa\u529b\u3067\u3059\u304c\u3001\u3053\u308c\u304c VMWare Fusion \u4f7f\u3063\u3066\u30af\u30ea\u30fc\u30f3\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u305f OS X Server 3.0 \u3060\u3068\u3069\u3046\u306a\u308b\u304b\u3068\u3044\u3046\u3068\u2026<\/p>\n
sudo \/usr\/sbin\/sso_util info -l\r\nPassword:\r\nafp\r\nafpserver\r\ncifs\r\nDNS\r\nfcsvr\r\nftp\r\nhost\r\nHTTP\r\nhttp\r\nimap\r\nipp\r\nldap\r\nnfs\r\npop\r\nsmb\r\nsmtp\r\nssh\r\nvnc\r\nvpn\r\nxmpp<\/pre>\n
\u7d50\u679c\u306b\u5dee\u304c\u3042\u308a\u3059\u304e\u3002<\/p>\n
\u3067\u3001 Server.app \u5b9f\u884c\u524d\u306b\u30b9\u30ca\u30c3\u30d7\u30b7\u30e7\u30c3\u30c8\u3092\u53d6\u3063\u3066\u305f\u306e\u3067\u3001\u305d\u3053\u306b\u623b\u3057\u3066 sso_util(8)<\/a> \u3092\u52d5\u304b\u3057\u3066\u307f\u308b\u3068<\/p>\n
sudo \/usr\/sbin\/sso_util info -l\r\nPassword:\r\nafpserver\r\ncifs\r\nhost\r\nvnc<\/pre>\n
\u3068\u3044\u3046\u3053\u3068\u3067\u3001 SSO \u51fa\u6765\u306a\u3044\u3068\u60a9\u3093\u3067\u305f\u672c\u756a\u30b5\u30fc\u30d0\u30fc\u306f Mavericks \u540c\u7b49\u306e\u8a2d\u5b9a\u3068\u3044\u3046\u304b OS X Server \u3092\u5165\u308c\u305f\u7532\u6590\u306e\u306a\u3044\u72b6\u614b\u3068\u306a\u3063\u3066\u3044\u305f\u3088\u3046\u3067\u3059\u3002\u305d\u308a\u3083\u3042\u52d5\u304b\u306a\u304f\u3066\u3082\u4ed5\u65b9\u306a\u3044\u306d\u3002<\/p>\n
sso_util(8)<\/a> \u304c\u3069\u3046\u3084\u3063\u3066 Kerberized \u306a\u30b5\u30fc\u30d3\u30b9\u3092\u8a8d\u8b58\u3057\u3066\u308b\u304b\u308f\u304b\u3089\u306a\u3044\u306e\u3067\u3044\u308d\u3044\u308d\u3068\u30b0\u30b0\u3063\u3066\u307f\u305f\u306e\u3067\u3059\u304c\u6709\u52b9\u306a\u60c5\u5831\u306f\u7686\u7121\u3002<\/p>\n
\u3067\u3082 Server.app \u5b9f\u884c\u524d\u5f8c\u3067\u660e\u78ba\u306a\u5dee\u304c\u3042\u308b\u306e\u3067\u3001\u305d\u3053\u3092\u63a2\u308c\u3070\u306a\u3093\u304b\u51fa\u308b\u306f\u305a\u3001\u3068\u4fe1\u3058\u3066\u518d\u5ea6 Server.app \u5b9f\u884c\u524d\u306e\u30b9\u30ca\u30c3\u30d7\u30b7\u30e7\u30c3\u30c8\u306b\u623b\u3057\u3066\u3001Server.app \u3092\u5b9f\u884c\u3057\u3066\u304b\u3089\u304a\u3082\u3080\u308d\u306b\u30bf\u30fc\u30df\u30ca\u30eb\u304b\u3089 5 \u5206\u4ee5\u5185\u306b\u5909\u66f4\u304c\u3042\u3063\u305f\u30d5\u30a1\u30a4\u30eb\u3092 find \u3057\u3066\u307f\u307e\u3057\u305f\u3002\u539f\u59cb\u7684\u3002<\/p>\n
sudo find \/ -mmin -5 -type f > find.log<\/pre>\n
\u3053\u3053\u3067\u30ea\u30b9\u30c8\u30a2\u30c3\u30d7\u3055\u308c\u305f\u30d5\u30a1\u30a4\u30eb\u3092\u773a\u3081\u3066\u305d\u308c\u3063\u307d\u3044\u306e\u3092\u78ba\u8a8d\u3059\u308b\u3001\u3068\u3044\u3046\u2026\u3002\u3044\u3084\u3001\u3082\u3063\u3068\u3044\u3044\u65b9\u6cd5\u306a\u3044\u306e?<\/p>\n
\u305d\u308c\u306f\u305d\u3046\u3068\u3001\u6b32\u3057\u3044\u30d5\u30a1\u30a4\u30eb\u7fa4\u306f\u62bd\u51fa\u3067\u304d\u305f\u306e\u3067\u3001\u305d\u3053\u304b\u3089\u81ed\u3044\u540d\u524d\u3092\u30d4\u30c3\u30af\u30a2\u30c3\u30d7\u3057\u3066\u4e2d\u8eab\u3092\u78ba\u8a8d\u3059\u308b\u3060\u3051\u3067\u3059\u3002\u76ee\u3092\u4ed8\u3051\u305f\u306e\u306f\u3053\u3053\u3089\u8fba<\/p>\n
\/private\/var\/db\/dslocal\/nodes\/Default\/computers\/localhost.plist\r\n\/private\/var\/db\/dslocal\/nodes\/Default\/config\/dhcp.plist\r\n\/private\/var\/db\/dslocal\/nodes\/Default\/config\/shadowhash.plist\r\n\/private\/var\/db\/dslocal\/nodes\/Default\/groups\/_appserveradm.plist\r\n\/private\/var\/db\/dslocal\/nodes\/Default\/groups\/_appserverusr.plist\r\n\/private\/var\/db\/dslocal\/nodes\/Default\/groups\/_developer.plist\r\n\/private\/var\/db\/dslocal\/nodes\/Default\/groups\/_teamsserver.plist\r\n\/private\/var\/db\/dslocal\/nodes\/Default\/groups\/_xcstest.plist\r\n\/private\/var\/db\/dslocal\/nodes\/Default\/sqlindex-wal\r\n\/private\/var\/db\/dslocal\/nodes\/Default\/users\/_krbtgt.plist\r\n\/private\/var\/db\/dslocal\/nodes\/Default\/users\/_xcstest.plist\r\n\/private\/var\/db\/dslocal\/nodes\/Default\/users\/com.apple.calendarserver.plist<\/pre>\n
\u3063\u3066\u540d\u524d\u7684\u306b\u30ed\u30fc\u30ab\u30eb\u306e\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u30b5\u30fc\u30d3\u30b9(?)\u306e\u5b9f\u4f53\u3063\u307d\u3044\u3067\u3059\u306d\u3002\u3044\u304b\u306b\u3082\u305d\u308c\u3063\u307d\u3044\u540d\u524d\u304c\u3064\u3044\u3066\u308b config \u304c\u81ed\u3044\u3068\u601d\u3063\u305f\u306e\u3067\u3059\u304c\u3001\u3069\u3061\u3089\u3082\u30cf\u30ba\u30ec\u3002 users \u3084 groups \u306f\u660e\u3089\u304b\u306b\u9055\u3046\u3060\u308d\u3046\u3057\u306a\u3041\u3001\u3068\u6d88\u53bb\u6cd5\u3067 computers\/localhost.plist \u3092\u8997\u3044\u3066\u307f\u307e\u3059\u3001\u304c\u30d0\u30a4\u30ca\u30ea\u30d5\u30a1\u30a4\u30eb\u2026\u3002<\/p>\n
\u3053\u3093\u306a\u6642\u306b\u306f plutil(1) <\/a>\u306e\u51fa\u756a! \u304a\u304b\u3057\u304f\u306a\u3063\u305f\u3089\u30b9\u30ca\u30c3\u30d7\u30b7\u30e7\u30c3\u30c8\u306b\u623b\u305b\u3070\u3044\u3044\u3084\u7684\u304a\u6c17\u697d\u3055\u3067\u5b9f\u30d5\u30a1\u30a4\u30eb\u3092\u5909\u63db\u3057\u307e\u3059(\u7b11<\/p>\n
sudo -s\r\ncd \/private\/var\/db\/dslocal\/nodes\/Default\/computers\/\r\nplutil -convert xml1 localhost.plist\r\nmore localhost.plist<\/pre>\n
\u3068\u3059\u308b\u3068<\/p>\n
(\u7565)\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <key>kerberosServices<\/key>\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <array>\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <string>host<\/string>\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <string>afpserver<\/string>\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <string>cifs<\/string>\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <string>vnc<\/string>\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <string>afp<\/string>\r\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <string>DNS<\/string>\r\n(\u7565)<\/pre>\n
\u3053\u308c\u3058\u3083\u306d!? \u3068\u8a66\u3057\u306b DNS \u3092\u524a\u9664\u3057\u3066\u518d\u5ea6 sso_util \u3092\u52d5\u304b\u3057\u3066\u307f\u308b\u3068<\/p>\n
sudo \/usr\/sbin\/sso_util info -l\r\nPassword:\r\nafp\r\nafpserver\r\ncifs\r\nfcsvr\r\nftp\r\nhost\r\nHTTP\r\nhttp\r\nimap\r\nipp\r\nldap\r\nnfs\r\npop\r\nsmb\r\nsmtp\r\nssh\r\nvnc\r\nvpn\r\nxmpp<\/pre>\n
\u51fa\u529b\u5909\u308f\u3063\u305f!!(\u3064\u3044\u3067\u306b xml \u5316\u3057\u305f localhost.plist \u304c\u518d\u3073\u30d0\u30a4\u30ca\u30ea\u5316!)<\/span><\/p>\n
\u3057\u304b\u3057\u3044\u3061\u3044\u3061\u30c6\u30ad\u30b9\u30c8\u5316\u3057\u3066\u7de8\u96c6\u3059\u308b\u306e\u306f\u9762\u5012\u3060\u306a\u3041\u3001\u3068\u304b\u601d\u3044\u3064\u3044\u305f\u3068\u3053\u308d\u3067 dscl(1)<\/a> \u306e\u5b58\u5728\u3092\u601d\u3044\u51fa\u3057\u305f\u2026\u3002<\/p>\n
dscl . -read \/Computers\/localhost\r\ndsAttrTypeNative:KerberosFlags: 110\r\ndsAttrTypeNative:KerberosKeys:\r\n\u00a0307ea103 020103a0 77307530 2da12b30 29a00302 0112a122 0420fcc4 27b52feb 85b9cbbe 1ae3b7b7 c9a73371 3c39096b 3f2fdadc 57bc01d9 c7fe301d a11b3019 a0030201 11a11204 10086c11 776036c4 f34f463e 0d96ae4b 1e3025a1 233021a0 03020110 a11a0418 9d0bbc8c 54164f7c 6ba1a485 2a1fc7a7 5bc2157f 925b7646\r\nAppleMetaNodeLocation: \/Local\/Default\r\nIPAddress: 127.0.0.1\r\nIPv6Address: ::1 fe80::1%lo0\r\nKerberosServices: host afpserver cifs vnc afp DNS fcsvr ftp HTTP http imap ipp ldap nfs pop smtp ssh smb xmpp vpn\r\nRecordName: localhost\r\nRecordType: dsRecTypeStandard:Computers<\/pre>\n
\u2026\u4eca\u307e\u3067\u306e\u82e6\u52b4\u306f\u3044\u3063\u305f\u3044\u3001\u3068\u3044\u3046\u6c17\u304c\u3057\u306a\u3044\u3067\u3082\u306a\u3044\u3051\u3069\u3001 dscl(1) <\/a>\u3067 KerberosServices \u3092\u5f04\u308b\u306e\u304c\u30a2\u30c3\u30d7\u30eb\u7684\u306a\u624b\u9806\u306e\u3088\u3046\u306a\u6c17\u304c\u3057\u307e\u3059\u3002\u672c\u756a\u30b5\u30fc\u30d0\u30fc\u3067\u3053\u3093\u306a\u611f\u3058\u306b\u3057\u3066\u307f\u307e\u3057\u305f\u3002<\/p>\n
sudo dscl . -append \/Computers\/localhost KerberosServices afp DNS fcsvr ftp HTTP http imap ipp ldap nfs pop smb smtp ssh vpn xmpp<\/pre>\n
\u3053\u3053\u307e\u3067\u304f\u308c\u3070\u3042\u3068\u306f\u6b63\u898f\u306e\u624b\u9806\u3001\u3068\u3044\u3046\u304b sso_util(8)<\/a> \u306e\u672c\u6765\u306e\u4f7f\u3044\u65b9\u3067\u306a\u3093\u3068\u304b\u306a\u308a\u305d\u3046\u3067\u3059(\u58ca\u308c\u305f\u3089\u3069\u3046\u3057\u3088\u3046\u2026<\/span>\u3002<\/p>\n
sudo \/usr\/sbin\/sso_util configure -r REALM -a admin_name -p admin_password all<\/pre>\n
\u7279\u306b\u30a8\u30e9\u30fc\u3082\u306a\u304f\u7d42\u308f\u3063\u305f\u306e\u3067 Server.app \u304b\u3089\u30e1\u30fc\u30eb\u3092\u518d\u8d77\u52d5(\u5165\u2192\u5207\u2192\u5165)<\/span>\u3057\u3066 Mail.app \u304b\u3089 Kerberos \u3067\u30a2\u30af\u30bb\u30b9\u3057\u3066\u307f\u305f\u3068\u3053\u308d\u3001 Mail.app \u304b\u3089\u306f\u6b63\u5e38\u306b\u30a2\u30af\u30bb\u30b9\u51fa\u6765\u305f\u98a8\u5473\u3002\u672c\u756a\u30b5\u30fc\u30d0\u30fc\u5074\u306e \/Library\/Logs\/Mail\/mail-info.log \u306b\u3082<\/p>\n
Jan 15 21:43:15 imap-login: Info: ID sent: name=Mac OS X Mail, version=7.1 (1827), os=Mac OS X, os-version=10.9.1 (13B42), vendor=Apple Inc.: user=<>, rip=192.168.0.23, lip=192.168.0.3, TLS\r\nJan 15 21:43:15 imap-login: Info: Login: user=<goro>, method=GSSAPI<\/span>, rip=192.168.0.23, lip=192.168.0.3, mpid=69124, TLS\r\nJan 15 21:43:15 imap(pid 69124 user goro): Info: Disconnected: Logged out in=28 out=546<\/pre>\n
\u3068 GSSAPI \u3067\u30a2\u30af\u30bb\u30b9\u3057\u305f\u30ed\u30b0\u304c\u6b8b\u3063\u305f\u306e\u3067\u3001\u3069\u3046\u3084\u3089 SSO \u304c\u5fa9\u6d3b\u3057\u305f\u3088\u3046\u3067\u3059\u3002\u3084\u3063\u305f\u30fc\u3002<\/p>\n
\u3061\u306a\u307f\u306b sso_util configure \u3057\u305f\u5f8c\u306b ktutil list \u3059\u308b\u3068\u3001 \/private\/etc\/krb5.keytab \u306b\u3044\u308d\u3044\u308d\u66f8\u304b\u308c\u305f\u3088\u3046\u306a\u96f0\u56f2\u6c17\u3092\u611f\u3058\u308b\u7d50\u679c\u304c\u51fa\u529b\u3055\u308c\u3066\u304d\u305f\u306e\u3067\u3001 sso_util \u306b\u983c\u3089\u305a\u30bf\u30c0\u306e Heimdal<\/a> \u3068\u3057\u3066\u8a2d\u5b9a\u3057\u305f\u307b\u3046\u304c\u65e9\u304b\u3063\u305f\u3088\u3046\u306a\u6c17\u304c\u3057\u3066\u304d\u307e\u3057\u305f\u2026(\u7b11)\u3002
\n\u3053\u3046\u3084\u3063\u3066\u30c8\u30e9\u30d6\u3063\u305f\u6642\u306b\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u306e\u5c11\u306a\u3055\u304c\u97ff\u3044\u3066\u304f\u308b\u3088\u306a\u3041\u2026\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"
\u6211\u304c\u5bb6\u306e OS X Server \u3092 Mavericks\/OS X Server 3.0 \u306b\u3042\u3052\u305f\u6642\u306b Dovecot \u304c GSSAPI \u3067\u8a8d\u8a3c\u3057\u306a\u3044 \u3068\u66f8\u3044\u305f\u3088\u3046\u306b\u3001 Mountain Lion\/OS X Server […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11],"tags":[56,57,62,23],"class_list":["post-2550","post","type-post","status-publish","format-standard","hentry","category-mac","tag-kerberos","tag-open-directory","tag-os-x-server","tag-software"],"_links":{"self":[{"href":"https:\/\/borg4.vdomains.jp\/~goro\/diary\/wp-json\/wp\/v2\/posts\/2550","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borg4.vdomains.jp\/~goro\/diary\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borg4.vdomains.jp\/~goro\/diary\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borg4.vdomains.jp\/~goro\/diary\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/borg4.vdomains.jp\/~goro\/diary\/wp-json\/wp\/v2\/comments?post=2550"}],"version-history":[{"count":7,"href":"https:\/\/borg4.vdomains.jp\/~goro\/diary\/wp-json\/wp\/v2\/posts\/2550\/revisions"}],"predecessor-version":[{"id":2557,"href":"https:\/\/borg4.vdomains.jp\/~goro\/diary\/wp-json\/wp\/v2\/posts\/2550\/revisions\/2557"}],"wp:attachment":[{"href":"https:\/\/borg4.vdomains.jp\/~goro\/diary\/wp-json\/wp\/v2\/media?parent=2550"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borg4.vdomains.jp\/~goro\/diary\/wp-json\/wp\/v2\/categories?post=2550"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borg4.vdomains.jp\/~goro\/diary\/wp-json\/wp\/v2\/tags?post=2550"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}