Kerberos5 + SSH Questions

[Simon Wilkinson]

On 3 Jan 2011, at 17:54, Brian Candler wrote:

> On Mon, Jan 03, 2011 at 09:02:59PM +0800, Lee Eric wrote:
>> My server OS is Fedora 14 and Kerberos version is 1.8.2-6 by using RPM
>> based. I tried to make SSH combined with Kerberos but it looks like
>> the authentication is failure when using Kerberos. Meanwhile, I don't
>> know where I did wrong in configuration file.
>> 
>> The attachment is necessary configuration I use.
> 
> I didn't see any attachment.
> 
> Basic checks are:
> 
> * Do you have "GSSAPIAuthentication yes" in /etc/ssh/sshd_config on the
>  server? (note: not KerberosAuthentication. That is password authentication
>  checked against the KDC)
> 
> * Do you have "GSSAPIAuthentication yes" in /etc/ssh/ssh_config on the
>  client?

You probably also want:

GSSAPIKeyExchange yes 

in both of these files, too.

Cheers,

Simon.