Help: OpenSSH cannot login by Kerberos

Richard E. Silverman res at qoxp.net
Sat Jun 11 03:30:28 EDT 2011


The server is offering Kerberos client authentication, the client is
trying it, and it's failing.  Take a look at the syslog messages from
sshd and see if there's anything helpful there.  If not, run a debugging
instance of the server:

$ sudo /usr/sbin/sshd -dep222

... connect to it (ssh -vp222), and watch the sshd debug output.

Once you get this working, you'll also want to enable GSSAPIKeyExchange,
so you get kerberized server authentication as well and you don't have
to deal with hostkeys.

-- 
  Richard Silverman
  res at qoxp.net



More information about the Kerberos mailing list