Proftpd with mod_gss: "GSSAPI Error minor: Permission denied"

[francesca caggiati]

Hi,

I’m trying to set up a PROFTPD-1.9 LINUX on RedHat ES system with mod_gss
( based on Kerberos 5) and mod_tls: the TLS solution works but the GSS does
not.

I need to implement the GSS solution, please help me.

This is the debug output:
/usr/local/src/kerberos/krb5-1.3.1/src/appl/gssftp/ftp/ftp -d -x
cmift001.wmo.inps.it
Connected to cmift001.wmo.inps.it.
220 ProFTPD 1.2.9 Server (cmift001.wmo.inps.it) [cmift001.wmo.inps.it]
---> AUTH GSSAPI
334 Using authentication type GSSAPI; ADAT must follow
GSSAPI accepted as authentication type
Trying to authenticate to <ftp at cmift001.wmo.inps.it>
calling gss_init_sec_context
---> ADAT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---> AUTH GSSAPI
Trying to authenticate to <host at cmift001.wmo.inps.it>
calling gss_init_sec_context
---> ADAT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GSSAPI Error major: Miscellaneous failure
GSSAPI Error minor: Permission denied
GSSAPI Error: Error acquiring credentials
GSSAPI ADAT failed
---> AUTH GSSAPI
GSSAPI authentication failed
---> AUTH KERBEROS_V4
KERBEROS_V4 rejected as an authentication type




Regards
Francesca