[Likewise-open-discuss] kerberized ssh not working
Jorge Ferrando
jferrando at cc.upv.es
Tue Apr 22 04:28:27 PDT 2008
If tried all: FQDN, short names, DNS aliases... same answer.
El 21/04/2008, a las 16:51, Gerald (Jerry) Carter escribió:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Jorge Ferrando wrote:
>> Hi all.
>>
>> I've properly installed likewise in a ubuntu linux box. It's working
>> ok with interactive and ssh logins.
>>
>> Now im trying to kerberize ssh as shown in likewise manuals adding
>> the
>> following lines to ssh_config and sshd_config
>>
>> GSSAPIAuthentication yes
>> GSSAPIDelegateCredentials yes
>>
>> It's not working.
>>
>> Running ssh with -vv option in the client, I get the following:
>>
>> debug1: Authentications that can continue: publickey,gssapi-
>> keyex,gssapi-with-mic,password,keyboard-interactive
>> debug1: Next authentication method: gssapi-keyex
>> debug1: No valid Key exchange context
>> debug2: we did not send a packet, disable method
>> debug1: Next authentication method: gssapi-with-mic
>> debug1: Unspecified GSS failure. Minor code may provide more
>> information
>> Server not found in Kerberos database
> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
>
> Looks like a DNS issue. Are you connecting to the FQDN
> of the host? Or short name? There's an open issue that
> I need to implement the DNS update for the host's PTR record.
>
>
>
>
>
> cheers, jerry
> - --
> =====================================================================
> Samba ------- http://www.samba.org
> Likewise Software --------- http://www.likewisesoftware.com
> "What man is a man who does not make the world better?" --Balian
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.6 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iD8DBQFIDKnWIR7qMdg1EfYRAvEcAKDE19FJaz7fNCy46Q6plNUDNKQH6ACg5q2J
> NFXamvTERY+rFJ4FLmOOwG4=
> =DV5k
> -----END PGP SIGNATURE-----
More information about the Likewise-open-discuss
mailing list