[31825] in Kerberos

home help back first fref pref prev next nref lref last post

Wrong principal in request

daemon@ATHENA.MIT.EDU (Jeff Blaine)
Wed Dec 30 13:33:45 2009

Message-ID: <4B3B9CEA.6000904@kickflop.net>
Date: Wed, 30 Dec 2009 13:33:14 -0500
From: Jeff Blaine <jblaine@kickflop.net>
MIME-Version: 1.0
To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

Just me again, stumped...

Client: PuTTY-GSSAPI from Matt Loar configured to perform GSSAPI
         authentication only, KfW 3.2, credentials for jblaine@FOO

Server: CentOS 5.3, MIT Kerberos 1.6.x, Russ Alberry's pam_krb5

Failure: Aside from GSSAPI not being used...

sshd[12234]: pam_krb5RA(sshd:auth): pam_sm_authenticate: entry (0x1)
sshd[12234]: pam_krb5RA(sshd:auth): (user jblaine) attempting 
authentication as jblaine@FOO
sshd[12234]: pam_krb5RA(sshd:auth): (user jblaine) credential 
verification failed: Wrong principal in request

======================================================================

Client: Solaris 10 SPARC, credentials for jblaine@FOO

         /usr/bin/ssh -l jblaine -o "GSSAPIAuthentication yes" -o
         "GSSAPIDelegateCredentials yes" 192.168.1.6

Server: CentOS 5.3, MIT Kerberos 1.6.x, Russ Alberry's pam_krb5
         (Same as previous failure)

Failure:

sshd[12256]: Postponed gssapi-with-mic for jblaine from 192.168.1.240 
port 32812 ssh2
sshd[12255]: debug1: Unspecified GSS failure.  Minor code may provide 
more information\nWrong principal in request\n

======================================================================
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post