Folks, I seem to have a problem when I upgraded our kerberos from 1.3.1 to 1.4.1 (MIT krb 5), all of a sudden I can't ssh as another user. i.e. ssh host works but ssh joe at host doesn't work. Same with scp's. I've tried recompiling ssh (even though the so-name of kerb libs didn't change), but it didn't work, and still no go... I'm using openssh 3.9p1 on Solaris 9 (and 8 and 2.6, but mostly 9) SPARC, and as I said MIT KerbV 1.4.1/1.3.1. Anyone have any ideas? -- Phil Dibowitz Systems Architect and Administrator Enterprise Infrastructure / ISD / USC UCC 180 - 213-821-5427 -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available Url : http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20050706/016d85c5/attachment.bin
On Wed, 6 Jul 2005, Phil Dibowitz wrote:> Folks, > > I seem to have a problem when I upgraded our kerberos from 1.3.1 to 1.4.1 (MIT > krb 5), all of a sudden I can't ssh as another user.Do you have tickets on the client? Are they for you, or for 'joe'? Are you expecting logging in as 'joe' to succeed due to a .k5login file, or should you be prompted for a password? What are you using for Kerberos password authentication? PAM, or the inbuilt KerberosAuthentication stuff? Does the server fail cleanly, or does it die? Can you provide debugging logs from the client (with -v -v) and from the server (-d -d -d)? Cheers, Simon.
Phil Dibowitz wrote:> Folks, > > I seem to have a problem when I upgraded our kerberos from 1.3.1 to 1.4.1 (MIT > krb 5), all of a sudden I can't ssh as another user. > > i.e. > > ssh host > > works but > > ssh joe at host > > doesn't work. Same with scp's....> Anyone have any ideas?yes, how about posting a debug trace so we can see what "doesn't work" really means. -d