kerberos debugging troubles

2006-07-09 Thread Jacob Yocom-Piatt
kerberos is setup to authenticate ssh sessions on my local network. it works fine to and from all the machines on the network except for the KDC itself. kerberos auth fails when sshing to or from the KDC. the logs of these failures from /var/heimdal/kdc.log, /var/log/authlog and ssh -vvv outputs ar

Re: kerberos debugging troubles

2006-07-10 Thread Ryan Corder
On Sun, 2006-07-09 at 18:58 -0500, Jacob Yocom-Piatt wrote: > any advice would be appreciated. i suspect that this is some issue related to > the KDC runnning current and the other machines being on 3.9 release. this shouldn't matter as the language heimdal speaks is the same, for the most part as

Re: kerberos debugging troubles

2006-07-10 Thread Spruell, Darren-Perot
From: [EMAIL PROTECTED] > the KDC is the only machine on the network that is running > current (snap > upgraded last night), the rest are on 3.9 release. here are > the debugging outputs: > debug1: Next authentication method: gssapi-with-mic > debug2: we sent a gssapi-with-mic packet, wait for r

Re: kerberos debugging troubles

2006-07-10 Thread Jacob Yocom-Piatt
>I ran into similar failures between versions of OpenBSD (KDC running current >and older releases on clients) that I was able to debug down to the level of >detecting an error related to "MIC failures". I think I had to bump up >debugging on sshd to get that. > DS, yah, this appeared in /var/log/

Re: kerberos debugging troubles

2006-07-10 Thread Spruell, Darren-Perot
From: [EMAIL PROTECTED] > >Assuming this works for you, I'd be interested in knowing > what the exact > >nature of the problem is, I hate fixing something blindly > without knowing > >why it's fixed. > > this has fixed most of the problems, except i can't ssh out > from the KDC using > kerberos