[37710] in Kerberos
Re: KEYRING:persistent and ssh
daemon@ATHENA.MIT.EDU (Roland C. Dowdeswell)
Tue Sep 27 11:26:50 2016
Date: Tue, 27 Sep 2016 11:21:31 -0400
From: "Roland C. Dowdeswell" <elric@imrryr.org>
To: tseegerkrb <tseegerkrb@gmail.com>
Message-ID: <20160927152131.GA29264@roofdrak.imrryr.org>
MIME-Version: 1.0
Content-Disposition: inline
In-Reply-To: <eb75c622-9451-d0de-5e0a-5a1802570d6e@gmail.com>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Tue, Sep 27, 2016 at 09:40:45AM +0200, tseegerkrb wrote:
>
> An other problem is that i can not use user@REALM to ssh to the next box
> without a password. If use "kinit user@REALM" i get a ticket, but if i
> then "ssh -l user@REALM mybox" it ask for the password again. But if i
> just use "ssh -l user mybox" it connects without the password.
>
> Any idea where i should search for the failure?
Your account on the other box is likely "user" not "user@REALM".
What's in /etc/passwd? If it is "user:..." then the account's name
is "user" and you must use "-l user". It's prompting you for a
password on the other host because your login has failed because
the username doesn't match an existing user on the system.
--
Roland Dowdeswell http://Imrryr.ORG/~elric/
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
