[33474] in Kerberos
Re: Help: OpenSSH cannot login by Kerberos
daemon@ATHENA.MIT.EDU (Richard E. Silverman)
Mon Jun 13 15:34:17 2011
From: res@qoxp.net (Richard E. Silverman)
Message-ID: <m2zklozuy3.fsf@darwin.oankali.net>
MIME-Version: 1.0
X-Complaints-To: abuse@thundernews.com
Date: Sat, 11 Jun 2011 03:30:28 -0400
To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
The server is offering Kerberos client authentication, the client is
trying it, and it's failing. Take a look at the syslog messages from
sshd and see if there's anything helpful there. If not, run a debugging
instance of the server:
$ sudo /usr/sbin/sshd -dep222
... connect to it (ssh -vp222), and watch the sshd debug output.
Once you get this working, you'll also want to enable GSSAPIKeyExchange,
so you get kerberized server authentication as well and you don't have
to deal with hostkeys.
--
Richard Silverman
res@qoxp.net
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
