SAS-pods-to-bu.html
PODS-to-BU-info.html
These configs need updating
SAS – need to join the BU domain
KRB : /etc
-rw-r--r-- 1 root root 1207 Oct 13 04:33 krb5.conf
16: default_realm = PODS.BU.INT
29:PODS.BU.INT = {
30: kdc = cobbscreek.pods.bu.int:88
31: admin_server = cobbscreek.pods.bu.int:749
32: master_kdc = cobbscreek.pods.bu.int
33: default_domain = PODS.BU.INT
37:.pods.bu.int = PODS.BU.INT
38:pods.bu.int = PODS.BU.INT
NEED SNYTAX TO CREATE THE new krb5.keytab
-rw------- 1 root root 1027 May 22 2017 krb5.keytab
SSSD : /etc/sssd
-rw------- 1 root root 1581 May 25 2017 /etc/sssd/sssd.conf
4:domains = pods.bu.int
23:[domain/PODS.BU.INT]
33:ad_server = cobbscreek.pods.bu.int, st-andrews.pods.bu.int, furnacecreek.pods.bu.int
34:ad_hostname = adnWhat are the names of the BU Domain servers?
buffalocreek.bu.binghamton.edu
turtlecreek.bu.binghamton.edu
What is the Domain Name and Default Realm for BU
BU.BINGHAMTON.EDU
What is the AD Hostname?
buffalocreek.bu.binghamton.edu
KERBEROS KeyTab and Config ( First thing to Do )
BUSAS@BU.BINGHAMTON.EDU
Does this attribute need to change in AD from PODS to BU? YES
msSFU30NisDomain: PODSix.pods.bu.int
35:ad_domain = pods.bu.int
38:krb5_realm = PODS.BU.INT
CRONTAB
0 */4 * * * /usr/bin/kinit -k -t /etc/krb5.keytab 'BUSAS$@PODS.BU.INT'
@reboot /usr/bin/kinit -k -t /etc/krb5.keytab 'BUSAS$@PODS.BU.INT'
HOSTS
/etc/hosts
remove old; add new
What are the names of the BU Domain servers?
buffalocreek.bu.binghamton.edu
turtlecreek.bu.binghamton.edu
What is the Domain Name and Default Realm for BU
BU.BINGHAMTON.EDU
What is the AD Hostname?
buffalocreek.bu.binghamton.edu
KERBEROS KeyTab and Config ( First thing to Do )
BUSAS@BU.BINGHAMTON.EDU
Does this attribute need to change in AD from PODS to BU? YES
msSFU30NisDomain: PODS
The transition should be transparent to you. On the SAS side we have to update the Kerberos registry with the BU domain servers.
Please use the following queries to spot check the SAS users (change cn=ksmith) to verify they have the highlighted attributes below in the BU domain.
PODS:
ldapsearch \
-D "cn=ksmith,cn=users,dc=pods,dc=bu,dc=int" \
-s sub -b "cn=users,dc=pods,dc=bu,dc=int" \
-H ldaps://adpods.binghamton.edu:636 \
-E pr=1000/noprompt "(cn=ksmith)" -x -W -LLL
BU:
ldapsearch \
-D "ksmith@binghamton.edu" \
-s sub -b "OU=Binghamton-University,DC=bu,DC=binghamton,DC=edu" \
-H ldaps://adpods.binghamton.edu:1636 \
-E pr=1000/noprompt "(cn=ksmith)" -x -W -LLL
uid: ksmith
mailHost: mpmail.binghamton.edu
msSFU30Name: ksmith
msSFU30Password: nn9hhxdvMBdQM
msSFU30NisDomain: PODS
uidNumber: 8790900
gidNumber: 100000
unixHomeDirectory: /u0/users/ksmith
loginShell: /bin/tcsh