On Wed, Jul 31, 2013 at 01:57:50PM -0500, KodaK wrote:
> On Wed, Jul 31, 2013 at 1:28 PM, KodaK <sako...@gmail.com> wrote:
> > On Wed, Jul 31, 2013 at 11:24 AM, Sumit Bose <sb...@redhat.com> wrote:
> >>
> >> On Wed, Jul 31, 2013 at 11:12:47AM -0500, KodaK wrote:
> >> > On Wed, Jul 31, 2013 at 11:09 AM, KodaK <sako...@gmail.com> wrote:
> >> >
> >> > >
> >> > >
> >> > > On Wed, Jul 31, 2013 at 6:56 AM, Sumit Bose <sb...@redhat.com> wrote:
> >> > >
> 
> Unfortunately, that made no difference:
> 
> sla400q1:/var/adm> nslookup 10.200.5.48
> Server:         10.200.2.24
> Address:        10.200.2.24#53
> 
> 48.5.200.10.in-addr.arpa        name = sla400q1.domain.com.
> 
> 
> Jul 31 14:55:09 sla400q1 auth|security:debug sshd[25624644]: debug1:
> Miscellaneous failure\nNo principal in keytab matches desired name\n
> 
> It sure would be nice if the desired name was printed along with that
> error message.

Can you increase the debug level of sshd any further? Maybe the name is
listen then? Are you sure sshd is expecting the keytab in
/etc/krb5/krb5.keytab on AIX?

bye,
Sumit
> 
> -- 
> The government is going to read our mail anyway, might as well make it
> tough for them.  GPG Public key ID:  B6A1A7C6

_______________________________________________
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Reply via email to