search for: eractive

...y,gs 00000010 73 61 70 69 2d 6b 65 79 65 78 2c 67 73 73 61 70 sapi-keyex,gssap 00000020 69 2d 77 69 74 68 2d 6d 69 63 2c 70 61 73 73 77 i-with-mic,passw 00000030 6f 72 64 2c 6b 65 79 62 6f 61 72 64 2d 69 6e 74 ord,keyboard-int 00000040 65 72 61 63 74 69 76 65 00 eractive. I think this can be solved in two parts; first, a credential->user mapping. For krb5 gssapi, I'd guess the username to use is the non-realm part of the UPN? Second, auth2.c calls pwnamallow("") early, before attempting the gssapi authentication. Untangling this bit of code from...

...for MONITOR_ANS_KEYVERIFY debug3: mm_request_receive_expect entering: type 23 debug3: mm_request_receive entering debug2: userauth_hostbased: authenticated 0 Failed hostbased for vf5 from 130.207.84.20 port 33083 ssh2 debug1: userauth-request for user vf5 service ssh-connection method keyboard-int eractive debug1: attempt 3 failures 3 debug2: input_userauth_request: try method keyboard-interactive Still getting an error from ssh_rsa_verify. Additionally I note in the debug output that despite trying to set in sshd_config the variable AuthorizedKeysFile /etc/ssh/authorized_keys that ssh -d -d -d outp...