[Likewise-open-discuss] kerberized ssh not working

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jorge Ferrando wrote:
> Hi all.
> 
> I've properly installed likewise in a ubuntu linux box. It's working  
> ok with interactive and ssh logins.
> 
> Now im trying to kerberize ssh as shown in likewise manuals adding the  
> following lines to ssh_config and sshd_config
> 
>     GSSAPIAuthentication yes
>     GSSAPIDelegateCredentials yes
> 
> It's not working.
> 
> Running ssh with -vv option in the client, I get the following:
> 
> debug1: Authentications that can continue: publickey,gssapi- 
> keyex,gssapi-with-mic,password,keyboard-interactive
> debug1: Next authentication method: gssapi-keyex
> debug1: No valid Key exchange context
> debug2: we did not send a packet, disable method
> debug1: Next authentication method: gssapi-with-mic
> debug1: Unspecified GSS failure.  Minor code may provide more  
> information
> Server not found in Kerberos database
  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Looks like a DNS issue.  Are you connecting to the FQDN
of the host?  Or short name?  There's an open issue that
I need to implement the DNS update for the host's PTR record.





cheers, jerry
- --
=====================================================================
Samba                                    ------- http://www.samba.org
Likewise Software          ---------  http://www.likewisesoftware.com
"What man is a man who does not make the world better?"      --Balian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFIDKnWIR7qMdg1EfYRAvEcAKDE19FJaz7fNCy46Q6plNUDNKQH6ACg5q2J
NFXamvTERY+rFJ4FLmOOwG4=
=DV5k
-----END PGP SIGNATURE-----