Hello,
Having a problem getting GSSAPI to work within latest OpenSSH 4.2p1 and latest MIT Kerberos distribution. Compiled and running under Debian Linux. MIT Kerberos utilities all check out, I can get TGTs just fine, and can authenticate with rlogin and so forth. But OpenSSH stubbornly refuses to do single sign-on with the TGT present. It drops through to keyboard-interactive right past gssapi-with-mic mechanism, so it's always prompting me for a password. All GSSAPI and Kerberos options are enabled in sshd_config. I noticed that the SSH client (ssh) is getting the TGS on my behalf and offering a GSSAPI stream, while the server (sshd) is ignoring it. sshd debug dumps don't show anything relevant. But I traced ssh and sshd, and it's apparent that ssh is issuing gss_*() calls while sshd isn't. Any ideas? TIA!
