[36156] in Kerberos

home help back first fref pref prev next nref lref last post

SSH and short-name machine credentials

daemon@ATHENA.MIT.EDU (Jaap)
Fri May 30 09:58:35 2014

To: kerberos@mit.edu
From: Jaap <jwinius@umrk.nl>
Date: Fri, 30 May 2014 13:58:01 +0000 (UTC)
Message-ID: <lma2p9$sud$1@ger.gmane.org>
Mime-Version: 1.0
X-Complaints-To: usenet@ger.gmane.org
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

Hi folks,

When SSH with Kerberos authentication is used, how can destination hosts 
with short-name machine credentials be accessed?

For example, when the destination host has machine credentials in the 
form "host/<host>.<domain>@<REALM>" accessing it with SSH is no problem. 
However, when it's "host/<host>@<REALM>" it doesn't and the SSH client 
gives the following error:

debug1: Unspecified GSS failure.  Minor code may provide more information
Server host/<host>.<domain>@<REALM> not found in Kerberos database

Is the only solution here to not use short-name machine credentials?

Thanks,

Jaap

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post