bugzilla-daemon at mindrot.org
2006-Jul-10 18:18 UTC
[Bug 944] ssh_config missing default configuration values for GSSAPI
http://bugzilla.mindrot.org/show_bug.cgi?id=944 mmokrejs at ribosome.natur.cuni.cz changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Resolution|FIXED | ------- Comment #3 from mmokrejs at ribosome.natur.cuni.cz 2006-07-11 04:18 ------- Please reopen and update the ssh_config with these two lines. Although I would aggree one should read manpages it is not easy for kerberos beginners to figure out some variable is missing in their config and that this is causing their client to fail. Please refwer to my original bugreport at Gentoo: http://bugs.gentoo.org/show_bug.cgi?id=132243 <quote> While inspecting bug # I was curious why sshd/ssh doesn't try my kerberos tickets. After some poking around and enabling the variables in /etc/ssh/sshd_config it turned out the *client* lacked the variables in /etc/ssh/ssh_config, which would instruct it to try gssapi. Please add to /etc/ssh/ssh_config these two lines: # Instruct ssh(1) client to attempt GSSAPI authentication, see ssh_config(5) # GSSAPIAuthentication yes # GSSAPIDelegateCredentials yes </quote> ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.
bugzilla-daemon at mindrot.org
2006-Jul-10 23:22 UTC
[Bug 944] ssh_config missing default configuration values for GSSAPI
http://bugzilla.mindrot.org/show_bug.cgi?id=944 dtucker at zip.com.au changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |RESOLVED Resolution| |FIXED ------- Comment #4 from dtucker at zip.com.au 2006-07-11 09:22 ------- (In reply to comment #3)> Please reopen and update the ssh_config with these two lines. [...] > # GSSAPIAuthentication yes > # GSSAPIDelegateCredentials yesThose are config options are already present: $ cvs annotate ssh_config |grep -i gss Annotations for ssh_config *************** 1.22 (dtucker 29-May-06): # GSSAPIAuthentication no 1.22 (dtucker 29-May-06): # GSSAPIDelegateCredentials no ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.
Maybe Matching Threads
- [Bug 944] ssh_config missing default configuration values for GSSAPI
- [PATCH] ssh_config: reflect default CheckHostIP no
- [Bug 1312] Add short command-line option -K for activating GSSAPIDelegateCredentials
- [Bug 1004] X11 forwarding not working with ssh3.9p1 (Error: Can't open display)
- Problems using gssapi authentication from FreeBSD to Linux machines