Problem: passwordless SSH-login with Kerberos doesn't work

Nicolas Williams Nicolas.Williams at sun.com
Mon Jun 15 18:49:16 EDT 2009


On Mon, Jun 15, 2009 at 06:41:30PM -0400, Simo Sorce wrote:
> > debug1: Unspecified GSS failure.  Minor code may provide more 
> > information\nNo principal in keytab matches desired name\n
> 
> Clearly the ssh server does not agree about what is the right name.
> 
> The hostname of the machine must the same name you set in the keytab.
> 
> That's what sshd uses (probably through gethostname()) to determine what
> principal name to search for in the keytab.

Using GSS_C_NO_CREDENTIAL (or a credential for GSS_C_NO_NAME) for the
acceptor credential has its advantages.



More information about the Kerberos mailing list