[22465] in Kerberos
Re: Problem with ssh and kerberos
daemon@ATHENA.MIT.EDU (rachel elizabeth dillon)
Thu Sep 16 18:57:52 2004
Date: Thu, 16 Sep 2004 18:55:37 -0400
From: rachel elizabeth dillon <red@mit.edu>
To: Ghe Rivero <ghe@upsa.es>
Message-ID: <20040916225537.GB4241@dodecahedron.mit.edu>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <1095230563.22118.8.camel@localhost>
cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
Have you tried looking in /var/krb5/kdc.log on your KDC to see if the
KDC is getting a ticket request? It if is, there should be an error
associated; if not, you may need to change something in one of the
ssh config files. (Also, you are using ssh-krb5 on both the server
and client machines, correct? If you are not, you should.)
Hope this helps,
-r.
On Wed, Sep 15, 2004 at 08:42:43AM +0200, Ghe Rivero wrote:
> Hi people!
> I've some debian machines with kerberos properly working to
> authenticate users. The problem is that i have installed ssh-krb5 and it
> doesn't works.
> In the kdc server i have created and ktadd a principal for
> host/ssh.server.com, and export it to the krb5.keytab file on the
> ssh.server.com. With klist -k in the ssh.server and kvno in the kdc and
> clients machines they return me the same number. When i connect with
> ssh, it ask me for a password and i don't get a ticket for it (i already
> kave a krbtgt ticket).
> The configuration of ssh_config and sshd_config files are the defaults
> from debian sarge.
>
> Any idea about what can be happeninig? Thx in advanced
>
> Ghe Rivero
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
