Hi Micha³,
> > That's a little strange. If it works for gss-client, it should be working for sshd...
> I'd expect that too
> Checked. Anyway, if this was incorrect, the gss-client would fail either.
>
>> * The moonshot user definitely exists and has a home directory
>Yes it does.
>ssh [log in to unmask]
Just to confirm, we've updated the Live DVD instructions to resolve several of the issues that we discovered whilst trying to resolve this.
1. We've added instructions to add the SAML assertion to the post-auth step in FreeRADIUS, although in your system I pasted the update instruction directly instead of using a policy file.
2. We've added instructions to correct the permissions in FreeRADIUS configuration directories, and we've corrected the information about the Issuer in the Moonshot Identity Manager. Using 'local' as Issuer will not work in newer instances.
3. We've clarified (in the SSH instructions) to set the hostname manually if continuing to experience issues with the SSH test.
4. I'll also add a troubleshooting guide for the Live DVD with more substantial issues and possible workarounds (when working with virtual images).
5. I'll send you a link shortly to an upgrade guide for upgrading the Live DVD to the newest software from our repositories (which will include several changes in FreeRADIUS), but this will also be linked to in the Live DVD instructions on the Wiki.
My apologies for the protracted delays in resolution, and thank you for being patient as we've resolved these issues.
With Regards
Stefan Paetow
Moonshot Industry & Research Liaison Coordinator
t: +44 (0)1235 822 125
gpg: 0x3FCE5142
xmpp: [log in to unmask]
skype: stefan.paetow.janet
jisc.ac.uk
Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800.
Jisc Collections and Janet Ltd. is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under Company No. number 2881024, VAT No. GB 197 0632 86. The registered office is: Lumen House, Library Avenue, Harwell, Didcot, Oxfordshire, OX11 0SG. T 01235 822200.
|