Mathew Rowley <[email protected]> writes:

> Well, that would make sense... Looking at the sshd and ssh configurations,
> it seems to be enabled on both.  Is there some configuration I am missing?
>
> [r...@ipa01 ~]# grep -i GSSAPI  /etc/ssh/ssh_config
>         GSSAPIAuthentication yes
> [r...@ipa01 ~]# grep -i GSSAPI  /etc/ssh/sshd_config
> # GSSAPI options
> GSSAPIAuthentication yes
> GSSAPICleanupCredentials yes

Your original pasted example showed you ssh'ing to u...@localhost.  Unless
you have a key for localhost in your keytab, that probably isn't going to
work.  ssh authenticates to the hostname that you type on the command
line.

-- 
Russ Allbery ([email protected])             <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list           [email protected]
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to