Re: ssh gssapi-with-mic and Key table entry not found

2012-08-08 Thread Matt Garman
On Tue, Aug 7, 2012 at 11:40 PM, Greg Hudson ghud...@mit.edu wrote: On 08/07/2012 01:23 PM, Matt Garman wrote: [root@lnxsvr11 ~]# grep 192.168.187.67 /etc/hosts 192.168.187.67 lnxsvr11.mydomain.com lnxsvr11 [root@lnxsvr11 ~]# grep lnxsvr11\. /etc/hosts 192.168.187.67

Re: ssh gssapi-with-mic and Key table entry not found

2012-08-08 Thread Greg Hudson
On 08/08/2012 12:03 PM, Matt Garman wrote: I don't know enough about how Kerberos works, but I'll speculate a guess as to what was wrong yesterday: after a failed gssapi-with-mic login attempt, some residual stuff gets attached to the original TGT, some kind of cache of the permission denied

Re: ssh gssapi-with-mic and Key table entry not found

2012-08-08 Thread Greg Hudson
On 08/08/2012 12:33 PM, Greg Hudson wrote: If the server is running krb5 1.7 or later, this kind of problem should result in a Wrong principal in request error in the sshd output (which is still not very clear, but at least helps distinguish the problem from sshd trying to acquire the wrong

ssh gssapi-with-mic and Key table entry not found

2012-08-07 Thread Matt Garman
Hi, I'm trying to get ssh working using gssapi-with-mic authentication. I have about 40 machines running CentOS 5.7. (My bigger goal is to use NFSv4 mounts with krb5p security. All these machines mount the same NFSv4 share (think home directories) so my users need to be able to forward their

Re: ssh gssapi-with-mic and Key table entry not found

2012-08-07 Thread Simo Sorce
On Tue, 2012-08-07 at 12:23 -0500, Matt Garman wrote: Hi, I'm trying to get ssh working using gssapi-with-mic authentication. I have about 40 machines running CentOS 5.7. (My bigger goal is to use NFSv4 mounts with krb5p security. All these machines mount the same NFSv4 share (think home

Re: ssh gssapi-with-mic and Key table entry not found

2012-08-07 Thread Matt Garman
On Tue, Aug 7, 2012 at 12:49 PM, Simo Sorce s...@redhat.com wrote: What does the 'hostname' command return on your machine ? Simo. [root@lnxsvr11 ~]# hostname lnxsvr11 [root@lnxsvr11 ~]# hostname -s lnxsvr11 [root@lnxsvr11 ~]# hostname -f lnxsvr11.mydomain.com -Matt

Re: ssh gssapi-with-mic and Key table entry not found

2012-08-07 Thread Simo Sorce
On Tue, 2012-08-07 at 12:58 -0500, Matt Garman wrote: On Tue, Aug 7, 2012 at 12:49 PM, Simo Sorce s...@redhat.com wrote: What does the 'hostname' command return on your machine ? Simo. [root@lnxsvr11 ~]# hostname lnxsvr11 [root@lnxsvr11 ~]# hostname -s lnxsvr11 [root@lnxsvr11

Re: ssh gssapi-with-mic and Key table entry not found

2012-08-07 Thread Matt Garman
On Tue, Aug 7, 2012 at 1:21 PM, Simo Sorce s...@redhat.com wrote: On Tue, 2012-08-07 at 12:58 -0500, Matt Garman wrote: On Tue, Aug 7, 2012 at 12:49 PM, Simo Sorce s...@redhat.com wrote: What does the 'hostname' command return on your machine ? [root@lnxsvr11 ~]# hostname lnxsvr11