[28010] in Kerberos
Re: Kerberized ssh under RHEL 4 - Single sign on
daemon@ATHENA.MIT.EDU (Sean P. Elble)
Thu Jul 5 09:43:47 2007
Date: Thu, 5 Jul 2007 09:43:22 -0400 (EDT)
From: "Sean P. Elble" <elbles@sessys.com>
To: Ido Levy <IDOL@il.ibm.com>
In-Reply-To: <OF186A5210.93E0C196-ONC225730F.00483EFD-C225730F.00493A94@il.ibm.com>
Message-ID: <Pine.LNX.4.64.0707050941340.3544@socrates.sessys.com>
MIME-Version: 1.0
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
You might want to check your /etc/ssh/sshd_config file for the following
options:
GSSAPIAuthentication yes
GSSAPICleanupCredentials yes <This is optional, but I recommend it>
With those two options set, OpenSSH should be able to accept Kerberos
tickets, and with any luck, that's the problem (i.e. those options not
being set). Hope that helps.
--
+-------------------------------------------------+
| Sean Elble |
| Virginia Tech, Class of 2008 |
| Vice President, VTLUUG |
| E-Mail: elbles@sessys.com |
| Web: http://www.sessys.com/~elbles/ |
| Cell: 860.946.9477 |
+-------------------------------------------------+
On Thu, 5 Jul 2007, Ido Levy wrote:
>
> Hello,
>
> I am trying to configure kerberized ssh service on Linux machine running
> RHEL 4 image.
>
> Obtaining a kerberos ticket in the login process in an interactive mode (
> when providing a password ) is working properly,
> but when already having a ticket the ssh always ask for a password and the
> single sign on feature is not working.
>
> I would appreciate any links/reference/advice.
>
> Thanks,
>
> Ido Levy
> IBM Haifa Labs, Israel
>
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
> ________________________________________________________________________
> SES Computer Systems Anti-Virus and Anti-Spam E-Mail Filtering
> Powered By ClamAV & SpamAssassin
>
________________________________________________________________________
SES Computer Systems Anti-Virus and Anti-Spam E-Mail Filtering
Powered By ClamAV & SpamAssassin
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
