output of ssh -v ipaserver.example.com: debug1: Authentications that can continue: publickey,gssapi-with-mic,password debug1: Next authentication method: gssapi-with-mic debug1: Authentications that can continue: publickey,gssapi-with-mic,password debug1: Authentications that can continue: publickey,gssapi-with-mic,password debug1: Authentications that can continue: publickey,gssapi-with-mic,password debug1: Next authentication method: publickey debug1: Trying private key: /root/.ssh/identity debug1: Trying private key: /root/.ssh/id_rsa debug1: Trying private key: /root/.ssh/id_dsa debug1: Next authentication method: password [email protected]'s password:
It seems that authentications jump into gssapi-with-mic, but get nothing. On Wed, Dec 9, 2009 at 9:25 PM, Simo Sorce <[email protected]> wrote: > On Wed, 2009-12-09 at 15:16 +0800, Michael Kang wrote: > > Does anyone know what's wrong? > > > > On Tue, Dec 8, 2009 at 12:35 PM, Michael Kang <[email protected]> > > wrote: > > Dear all, > > > > I had setup a FreeIPA server and a FreeIPA client. After using > > the ktutil command to import the keytab, using the following > > command on another machine to test the configuration. This > > still need passwd. > > > > IPA Server: > > kinit admin > > ipa-addservice host/ipaclient.example.com > > ipa-getkeytab -s ipaserver.example.com -p > > host/ipaclient.example.com -k /tmp/krb5.keytab > > scp /tmp/krb5.keytab > > [email protected]:/tmp/krb5.keytab > > > > IPA client: > > # ktutil > > ktutil: read_kt /tmp/krb5.keytab > > ktutil: write_kt /etc/krb5/krb5.keytab > > ktutil: q > > ssh [email protected] (This don't need passwd.) > > > > > > PC or Mac: > > ssh [email protected] (This still need passwd.) > > So you did successfully kinit on the PC and on the Mac ? > You can get more info on what is going on by using ssh -vvv > > Simo. > > > -- > Simo Sorce * Red Hat, Inc * New York > > -- Michael Kang（康上明学） There is a giant asleep within every man. When the giant awakens,miracles happen. Personal blog: http://ufusion.org - United Fusion
_______________________________________________ Freeipa-users mailing list [email protected] https://www.redhat.com/mailman/listinfo/freeipa-users
