Mathew Rowley <[email protected]> writes:

> **Shows that there is a ticket
> [mrow...@ipa01 ~]$ klist
> Ticket cache: FILE:/tmp/krb5cc_502_WaiNgJ
> Default principal: [email protected]
>
> Valid starting     Expires            Service principal
> 12/15/08 19:52:10  12/16/08 05:52:10  krbtgt/[email protected]
>         renew until 12/15/08 19:52:10

You have no service ticket for the host, so GSSAPI authentication was
never even attempted by the client.

ssh -vvv may help in figuring out why that's the case.

-- 
Russ Allbery ([email protected])             <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list           [email protected]
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to