[33020] in Kerberos
Re: Kerberos5 + SSH Questions
daemon@ATHENA.MIT.EDU (Simon Wilkinson)
Mon Jan 3 13:48:56 2011
Mime-Version: 1.0 (Apple Message framework v1078)
From: Simon Wilkinson <simon@sxw.org.uk>
In-Reply-To: <20110103175455.GC5473@talktalkplc.com>
Date: Mon, 3 Jan 2011 18:15:54 +0000
Message-Id: <BA5A2D6C-D9E4-4379-9B16-6A2228B01A90@sxw.org.uk>
To: Brian Candler <B.Candler@pobox.com>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On 3 Jan 2011, at 17:54, Brian Candler wrote:
> On Mon, Jan 03, 2011 at 09:02:59PM +0800, Lee Eric wrote:
>> My server OS is Fedora 14 and Kerberos version is 1.8.2-6 by using RPM
>> based. I tried to make SSH combined with Kerberos but it looks like
>> the authentication is failure when using Kerberos. Meanwhile, I don't
>> know where I did wrong in configuration file.
>>
>> The attachment is necessary configuration I use.
>
> I didn't see any attachment.
>
> Basic checks are:
>
> * Do you have "GSSAPIAuthentication yes" in /etc/ssh/sshd_config on the
> server? (note: not KerberosAuthentication. That is password authentication
> checked against the KDC)
>
> * Do you have "GSSAPIAuthentication yes" in /etc/ssh/ssh_config on the
> client?
You probably also want:
GSSAPIKeyExchange yes
in both of these files, too.
Cheers,
Simon.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
