Problem using Kerberos for user authentication -- ChallengeResponseAuthentication

[Jeffrey Watts]

That's really weird, I'm using that option and the ticket is created on
login.  When I'm back in town I'll look closer.

Keep in mind, though, that I'm using current versions of PAM, pam_krb5 and
Kerberos with my RHEL5 systems, so it's possible that it's a bug fixed later
on.

Jeffrey.

On Thu, Nov 12, 2009 at 10:27 AM, Steve Glasser <sgla9347 at gmail.com> wrote:

> Hi all,
>
> We are running Kerberos/Ldap on RHEL 5.2, both server and clients.  We
> have found that if we set
>  ChallengeResponseAuthentication yes
> in sshd_conf the result is no TGT ticket is created when a user logs
> in by ssh.  This problem is detailed in a Debian bug report here; we
> don't see it having ever been fixed in redhat
>  http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=339734
> Setting
>  PasswordAuthentication yes
> does work, at least in our environment.
>
> If anyone has any further information on this we'd appreciate it.
>
>
-- 

"He that would make his own liberty secure must guard even his enemy from
oppression; for if he violates this duty he establishes a precedent that
will reach to himself." -- Thomas Paine