Problem: passwordless SSH-login with Kerberos doesn't work
Nicolas Williams
Nicolas.Williams at sun.com
Mon Jun 15 18:49:16 EDT 2009
On Mon, Jun 15, 2009 at 06:41:30PM -0400, Simo Sorce wrote:
> > debug1: Unspecified GSS failure. Minor code may provide more
> > information\nNo principal in keytab matches desired name\n
>
> Clearly the ssh server does not agree about what is the right name.
>
> The hostname of the machine must the same name you set in the keytab.
>
> That's what sshd uses (probably through gethostname()) to determine what
> principal name to search for in the keytab.
Using GSS_C_NO_CREDENTIAL (or a credential for GSS_C_NO_NAME) for the
acceptor credential has its advantages.
More information about the Kerberos
mailing list