Kerberized ssh under RHEL 4 - Single sign on

Sean P. Elble elbles at sessys.com
Thu Jul 5 09:43:22 EDT 2007


You might want to check your /etc/ssh/sshd_config file for the following 
options:

GSSAPIAuthentication yes
GSSAPICleanupCredentials yes <This is optional, but I recommend it>

With those two options set, OpenSSH should be able to accept Kerberos 
tickets, and with any luck, that's the problem (i.e. those options not 
being set). Hope that helps.

--
+-------------------------------------------------+
|  Sean Elble                                     |
|  Virginia Tech, Class of 2008                   |
|  Vice President, VTLUUG                         |
|  E-Mail:   elbles at sessys.com                    |
|  Web:      http://www.sessys.com/~elbles/       |
|  Cell:     860.946.9477                         |
+-------------------------------------------------+

On Thu, 5 Jul 2007, Ido Levy wrote:

>
> Hello,
>
> I am trying to configure kerberized ssh service on Linux machine running
> RHEL 4 image.
>
> Obtaining a kerberos ticket in the login process in an interactive mode (
> when providing a password ) is working properly,
> but when already having a ticket the ssh always ask for a password and the
> single sign on feature is not working.
>
> I would appreciate any links/reference/advice.
>
> Thanks,
>
> Ido Levy
> IBM Haifa Labs, Israel
>
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
> ________________________________________________________________________
> SES Computer Systems Anti-Virus and Anti-Spam E-Mail Filtering
> Powered By ClamAV & SpamAssassin
>
________________________________________________________________________
SES Computer Systems Anti-Virus and Anti-Spam E-Mail Filtering
Powered By ClamAV & SpamAssassin



More information about the Kerberos mailing list