The server is offering Kerberos client authentication, the client is
trying it, and it's failing.  Take a look at the syslog messages from
sshd and see if there's anything helpful there.  If not, run a debugging
instance of the server:

$ sudo /usr/sbin/sshd -dep222

... connect to it (ssh -vp222), and watch the sshd debug output.

Once you get this working, you'll also want to enable GSSAPIKeyExchange,
so you get kerberized server authentication as well and you don't have
to deal with hostkeys.

-- 
  Richard Silverman
  r...@qoxp.net
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to