Hubba's Blog

Notes from a Linux/Unix Engineer

Enable krb5 authentication for SSH

Posted on Thu, Sep 04, 2025 at 14:49 by Hubertus A. Haniel

After joining an AD it is very simple to enable kerberos authentication for SSH assuning your Windows ID and Unix ID match. - All you need to do is add the following 2 lines to /etc/ssh/sshd_config

GSSAPIAuthentication yes
GSSAPIKeyExchange yes

Al you then have to do is enable these options on your ssh client and you should be able to login to your linux systems with the credentials on the windows machine joined to the same domain.

Edited on: Thu, Sep 04, 2025 15:03

Posted in HowTo (RSS), System - Linux (RSS)