[Likewise-open-discuss] kerberized ssh not working

Jorge Ferrando jferrando at cc.upv.es
Tue Apr 22 04:28:27 PDT 2008


If tried all: FQDN, short names, DNS aliases... same answer.

El 21/04/2008, a las 16:51, Gerald (Jerry) Carter escribió:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Jorge Ferrando wrote:
>> Hi all.
>>
>> I've properly installed likewise in a ubuntu linux box. It's working
>> ok with interactive and ssh logins.
>>
>> Now im trying to kerberize ssh as shown in likewise manuals adding  
>> the
>> following lines to ssh_config and sshd_config
>>
>>    GSSAPIAuthentication yes
>>    GSSAPIDelegateCredentials yes
>>
>> It's not working.
>>
>> Running ssh with -vv option in the client, I get the following:
>>
>> debug1: Authentications that can continue: publickey,gssapi-
>> keyex,gssapi-with-mic,password,keyboard-interactive
>> debug1: Next authentication method: gssapi-keyex
>> debug1: No valid Key exchange context
>> debug2: we did not send a packet, disable method
>> debug1: Next authentication method: gssapi-with-mic
>> debug1: Unspecified GSS failure.  Minor code may provide more
>> information
>> Server not found in Kerberos database
>  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
>
> Looks like a DNS issue.  Are you connecting to the FQDN
> of the host?  Or short name?  There's an open issue that
> I need to implement the DNS update for the host's PTR record.
>
>
>
>
>
> cheers, jerry
> - --
> =====================================================================
> Samba                                    ------- http://www.samba.org
> Likewise Software          ---------  http://www.likewisesoftware.com
> "What man is a man who does not make the world better?"      --Balian
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.6 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iD8DBQFIDKnWIR7qMdg1EfYRAvEcAKDE19FJaz7fNCy46Q6plNUDNKQH6ACg5q2J
> NFXamvTERY+rFJ4FLmOOwG4=
> =DV5k
> -----END PGP SIGNATURE-----



More information about the Likewise-open-discuss mailing list