Question About Kerberos

Simon Wilkinson sxw at dcs.ed.ac.uk
Tue Mar 26 08:21:43 EST 2002


Srinivas Cheruku (csri at sonata-software.com) wrote:
: Use these option in instead of "KerberosAuthentication yes"
: GssapiAuthentication yes
: GssapiKeyExchange yes
: GssapiUseSessionCredCache yes

This won't solve the original posters problem. The GSSAPI options enable
Kerberos support in the version 2 protocol, the 'Kerberos' option enables
support in the version 1 protocol.

[someone else] wrote:

: /etc/ssh/sshd_config: line 64: Bad configuration option:
: KerberosAuthentication
: /etc/ssh/sshd_config: terminating, 1 bad configuration options

: Do you know what's wrong?

This means that Kerberos support isn't correctly compiled into your binary.
There are two common reasons for this. 

The first is that you haven't run 'autoreconf' from autoconf 2.52 or later
having applied the patches.

The second is that you haven't specified the --with-kerberos5 option to
configure, or that configure has been unable to locate the Kerberos libraries
in the location that you specified.

Cheers,

Simon.




More information about the Kerberos mailing list