Displaying 2 results from an estimated 2 matches for "gssapi_mic".
Did you mean:
gssapi_mit
2017 Jan 16
2
Question on Kerberos (GSSAPI) auth
...on process by its nature authenticates
only the client, the setting of mutual_req_flag is not needed for
this process. This flag SHOULD be set to "false".
However, when I try to have my implementation not set this flag and just send a GSSAPI_TOKEN message immediately followed by a GSSAPI_MIC message without waiting for a server token (since the authentication is complete as soon as the client token is sent when mutual auth is disabled), I get a failure from OpenSSH:
Failed gssapi-with-mic for ronf from 74.93.13.193 port 64645 ssh2
If I turn on mutual authentication in my client conte...
2017 Jan 17
2
Question on Kerberos (GSSAPI) auth
...t?s just the flags that are wrong, no error is returned. I would still expect some reaction when it later received the follow-on message from the client, though.
>> However, when I try to have my implementation not set this flag and just send a GSSAPI_TOKEN message immediately followed by a GSSAPI_MIC message without waiting for a server token (since the authentication is complete as soon as the client token is sent when mutual auth is disabled), I get a failure from OpenSSH:
>>
>
> From the above comment, you are assuming that there will be no other tokens exchanged.
>
> Af...