The server is offering Kerberos client authentication, the client is
trying it, and it's failing.  Take a look at the syslog messages from
sshd and see if there's anything helpful there.  If not, run a debugging
instance of the server:

$ sudo /usr/sbin/sshd -dep222

... connect to it (ssh -vp222), and watch the sshd debug output.

Once you get this working, you'll also want to enable GSSAPIKeyExchange,
so you get kerberized server authentication as well and you don't have
to deal with hostkeys.

-- 
  Richard Silverman
  [email protected]
________________________________________________
Kerberos mailing list           [email protected]
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to