Simon Wilkinson wrote: > Someone ([EMAIL PROTECTED]) wrote: > > : > klist -5 > : klist: No credentials cache found (ticket cache FILE:) > : > kinit > : kinit(v5): No credentials cache found when initializing cache > > Can you let me know what the KRB5CCNAME environment variable is set > to on the server. It looks like it may be set to a null or bogus string. > > : This is quite annoying and I really don't know why OpenSSH doesn't store > : my credentials. I even installed a UNIX KDC, thinking that it would be > : windows 2000 who is playing nasty tricks with me but it doesn't look like. > > : Any help would really be appreciated, it could be that I forgot > : something or I am missing something. If you need more infos like config > : files just let me know. > > From your logs, it looks like you're not doing credential forwarding at > all, but falling back to the inbuilt krb5 password checking. This appears > to not be correctly writing out a credentials cache. > > If you want to track down the credentials forwarding problem further, > could you send me privately a copy of the debug logs from the server (with > -d) and the client (with -v -v), where the client has valid credentials in > the cache when invoked.
Well that's right, I am trying to do an SSH from a host which isn't involved at all with Kerberos, that's because I would like when I login to a kerberized host that SSH fetches for me a ticket and caches it. Isn't that somehow possible ? For example if i log onto the console itself of the machine (which runs login.krb5), it's login.krb5 which fetches for me a ticket and caches it. If you still need the debugging logs, I will mail them to you on monday, if that's fine for you. Thanks for responding so fast Greetings ________________________________________________ Kerberos mailing list [EMAIL PROTECTED] http://mailman.mit.edu/mailman/listinfo/kerberos
