SSH and short-name machine credentials

Jaap jwinius at
Fri May 30 09:58:01 EDT 2014

Hi folks,

When SSH with Kerberos authentication is used, how can destination hosts 
with short-name machine credentials be accessed?

For example, when the destination host has machine credentials in the 
form "host/<host>.<domain>@<REALM>" accessing it with SSH is no problem. 
However, when it's "host/<host>@<REALM>" it doesn't and the SSH client 
gives the following error:

debug1: Unspecified GSS failure.  Minor code may provide more information
Server host/<host>.<domain>@<REALM> not found in Kerberos database

Is the only solution here to not use short-name machine credentials?



More information about the Kerberos mailing list