The server is offering Kerberos client authentication, the client is trying it, and it's failing. Take a look at the syslog messages from sshd and see if there's anything helpful there. If not, run a debugging instance of the server:
$ sudo /usr/sbin/sshd -dep222 ... connect to it (ssh -vp222), and watch the sshd debug output. Once you get this working, you'll also want to enable GSSAPIKeyExchange, so you get kerberized server authentication as well and you don't have to deal with hostkeys. -- Richard Silverman r...@qoxp.net ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos