Hi Clint,
I think I figures something out:
If I do a "ssh -vv jnet...@fcdflnx3.fnal.gov" (the computer I'm trying
to log into), towards the end of the output I get:
Jason Nett11:06:38 PM
debug1: Authentications that can continue:
gssapi-keyex,gssapi-with-mic,keyboard-interactive
debug1: Next authentication method: gssapi-keyex
debug1: No valid Key exchange context
debug2: we did not send a packet, disable method
debug1: Next authentication method: gssapi-with-mic
debug2: we sent a gssapi-with-mic packet, wait for reply
debug1: Authentication succeeded (gssapi-with-mic).
Authenticated to fcdflnx3.fnal.gov ([131.225.240.129]:22).
Notice that "gssapi-with-mic" is in the list of "Authentications that
can continue" and is the one that succeeded. When I try on the machine
that lost it's ability to ssh, this output is:
------------------------------------
debug1: Authentications that can continue:
gssapi-keyex,gssapi-with-mic,keyboard-interactive
debug1: Next authentication method: keyboard-interactive
debug2: userauth_kbdint
debug2: we sent a keyboard-interactive packet, wait for reply
debug1: Authentications that can continue:
gssapi-keyex,gssapi-with-mic,keyboard-interactive
debug2: we did not send a packet, disable method
debug1: No more authentication methods to try.
Permission denied (gssapi-keyex,gssapi-with-mic,keyboard-interactive).
-----------------------------------
So on this machine, "gssapi-keyex" and "gssapi-with-mic" are never
attempted--according to the verbose output--and only
"keyboard-interactive" is attempted. From my online searches, I gather
that gssapi-with-mic has something to do with communicating my kerberos
authentication, but I'm not quite sure where to go from here, at the moment.
Hopefully this extra info can help us rectify the issue quickly.
Jason
On 10/14/2011 04:42 PM, Clint Byrum wrote:
> Hi Jason, thanks for taking the time to file a bug report, and I'm sorry
> you're having trouble.
>
> The sshd -ddd needs to be run as root to be able to listen on port 22.
>
> Also, an output from your laptop of
>
> ssh -vv your.desktop.address
>
> Will help to debug this issue.
>
> ** Changed in: openssh (Ubuntu)
> Status: New => Incomplete
>
> ** Changed in: openssh (Ubuntu)
> Importance: Undecided => High
>
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/874518
Title:
ssh fails after upgrade to 11.10
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/874518/+subscriptions
--
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
