Ssh trouble with forwarding

Donn Cave donn at drizzle.com
Mon Sep 1 23:12:48 EDT 2003


Quoth matthijs at active2.homelinux.org (Matthijs Mohlmann):

| I have trouble with ssh en forwarding.
...
| Now when i try to login to my ssh service with the following command:
| matthijs at Server:~$ ssh -A -K active2.active2.homelinux.org
| Password:
|
| I don't want that password prompt. My ticket is enough to authenticate
| me.
|
| When i now do some debugging:
| Active2:~# ssh -d -f /etc/ssh/sshd_config
...
| 17612: debug1: Miscellaneous failure
| 17612: debug1: No principal in keytab matches desired name
|
| What does this mean ? I have a
| host/active2.active2.homelinux.org at ACTIVE2.HOMELINUX.ORG in my
| /etc/krb5.keytab on the ssh-server. I have also a ssh service key in my
| keytab (ssh/active2.active2.homelinux.org at ACTIVE2.HOMELINUX.ORG)

However, the IP address associated with that name seems to be
actually hosted at x4sall.nl, under another domain name.  Your
key unfortunately has to match that "canonical" domain name,
rather than active2.active2.  Or at any rate, you have to use
whatever name the host uses for itself.

	Donn Cave, donn at drizzle.com


More information about the Kerberos mailing list