openssh unix dev - Mar 2004 - gssapi, alpha's, OpenSSH 3.8p1 failing

I have OpenSSH 3.8p1 built and working with GSSAPI based authentication on 
NetBSD/i386-current and Solaris 9 but then when I try it on both 
NetBSD/alpha-1.6.2 and Tru64-V5.1 I get:

city-art% ssh -v embassy
OpenSSH_3.8p1, SSH protocols 1.5/2.0, OpenSSL 0.9.7c 30 Sep 2003
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Connecting to embassy [130.195.6.15] port 22.
debug1: Connection established.
debug1: read PEM private key done: type DSA
debug1: read PEM private key done: type RSA
debug1: identity file /u/staff/mark/.ssh/identity type 0
debug1: identity file /u/staff/mark/.ssh/id_rsa type 1
debug1: identity file /u/staff/mark/.ssh/id_dsa type -1
debug1: Remote protocol version 1.99, remote software version OpenSSH_3.8p1
debug1: match: OpenSSH_3.8p1 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_3.8p1
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host 'embassy' is known and matches the RSA host key.
debug1: Found key in /etc/ssh/ssh_known_hosts:73
debug1: ssh_rsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: 
publickey,gssapi-with-mic,password,hostbased
debug1: Next authentication method: gssapi-with-mic
Connection closed by 130.195.6.15

and the server end reports:

embassy sshd[312937]: fatal: Couldn't convert client name


In the Tru64 case OpenSSH is built against Heimdal 0.5.1 and in the 
NetBSD/alpha case its built against the in tree version which I think is a 
similar vintage.  The working NetBSD/i386 and Solaris versions are built 
against newer Heimdal releases.

So can anyone suggest if this is an OpenSSH bug (alpha 64bit issue?) or a 
problem with the older Heimdal?   And how can I fix this?

cheers
mark

Mark Davies wrote:
> I have OpenSSH 3.8p1 built and working with GSSAPI based authentication on 
> NetBSD/i386-current and Solaris 9 but then when I try it on both 
> NetBSD/alpha-1.6.2 and Tru64-V5.1 I get:
> 
> city-art% ssh -v embassy
> OpenSSH_3.8p1, SSH protocols 1.5/2.0, OpenSSL 0.9.7c 30 Sep 2003
[snip]
> embassy sshd[312937]: fatal: Couldn't convert client name
The entire server-side debugging (ie "sshd -ddd") would probably help
too.

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
     Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.

On Tuesday 23 March 2004 17:22, Mark Davies wrote:
> So can anyone suggest if this is an OpenSSH bug (alpha 64bit issue?) or a
> problem with the older Heimdal?   And how can I fix this?
To answer my own question - its a Heimdal issue. Rebuilding with Heimdal 0.6 
fixed it in both cases.

cheers
mark