[32497] in Kerberos
Problem with kerberos and gssapi
daemon@ATHENA.MIT.EDU (Olivier Roux)
Wed Jul 7 12:06:17 2010
Content-class: urn:content-classes:message
MIME-Version: 1.0
Date: Wed, 7 Jul 2010 14:39:00 +0200
Message-ID: <D0A9376549BCB946B0327155298E779C649855@SRV-EXCH-ECE.laureate.local>
From: "Olivier Roux" <oroux@ece.fr>
To: <kerberos@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Hello
I have the following problem
I have a new server. that must connect passwordless with an windows AS
(to replace an old server)
With the new client on the new server , the password of the account is always
asked
I don't understand why !!
The kinit and klist is ok
The only difference with the old client side is on the log of ssh (with -vvv)
With the new client
debug1: Next authentication method: gssapi-with-mic
debug2: we sent a gssapi-with-mic packet, wait for reply
debug3: Received SSH2_MSG_IGNORE
debug1: Delegating credentials
debug3: Received SSH2_MSG_IGNORE
debug1: Authentications that can continue:
debug3: start over, passed a different list
gssapi-with-mic,publickey,keyboard-interactive,password
with the old client
debug3: authmethod_is_enabled gssapi-with-mic
debug1: Next authentication method: gssapi-with-mic
debug2: we sent a gssapi-with-mic packet, wait for reply
debug1: Delegating credentials
debug1: Delegating credentials
debug1: Authentication succeeded (gssapi-with-mic).
debug1: channel 0: new [client-session]
It seems that the ssh client receive debug3: Received SSH2_MSG_IGNORE and it
is the problem that block the authentification
So, it used method password instead
Version of openssh : 5.2p1
Freebsd OS
Anybody have idea ?
--
Roux Olivier
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
