> Without this passwordless login using GSSAPI via SSH is not possible
to a Ubuntu 22.04 machine.


This is not entirely true. We have tests that attempt this login and they pass 
just fine. There is some other detail that is missing. I'll read up in more 
detail on what the sssd_krb5_localauth_plugin.so plugin does. The upstream bug 
also had in one of the comments confirmation that a ~/.k5login file with the 
name of the principal would allow login to work, which tells me some sort of 
mapping between the username of the ssh command (which can have @DOMAIN 
components) and the local username is missing, and that plugin might be 
responsible for it.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2037321

Title:
  missing includedir snippet in krb5.conf causes GSSAPI to fail

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/kerberos-configs/+bug/2037321/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to