On Mon, Jun 15, 2009 at 06:41:30PM -0400, Simo Sorce wrote: > > debug1: Unspecified GSS failure. Minor code may provide more > > information\nNo principal in keytab matches desired name\n > > Clearly the ssh server does not agree about what is the right name. > > The hostname of the machine must the same name you set in the keytab. > > That's what sshd uses (probably through gethostname()) to determine what > principal name to search for in the keytab.
Using GSS_C_NO_CREDENTIAL (or a credential for GSS_C_NO_NAME) for the acceptor credential has its advantages. ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
