search for: gssapi_token

Displaying 2 results from an estimated 2 matches for "gssapi_token".

2017 Jan 16
2
Question on Kerberos (GSSAPI) auth
...in section 3.4: Since the user authentication process by its nature authenticates only the client, the setting of mutual_req_flag is not needed for this process. This flag SHOULD be set to "false". However, when I try to have my implementation not set this flag and just send a GSSAPI_TOKEN message immediately followed by a GSSAPI_MIC message without waiting for a server token (since the authentication is complete as soon as the client token is sent when mutual auth is disabled), I get a failure from OpenSSH: Failed gssapi-with-mic for ronf from 74.93.13.193 port 64645 ssh2 If I tur...
2017 Jan 17
2
Question on Kerberos (GSSAPI) auth
...e, but if the context is already complete and it?s just the flags that are wrong, no error is returned. I would still expect some reaction when it later received the follow-on message from the client, though. >> However, when I try to have my implementation not set this flag and just send a GSSAPI_TOKEN message immediately followed by a GSSAPI_MIC message without waiting for a server token (since the authentication is complete as soon as the client token is sent when mutual auth is disabled), I get a failure from OpenSSH: >> > > From the above comment, you are assuming that there wil...