Re: Problems using gssapi authentication from FreeBSD to Linux machines

Quincey Koziol wrote:
> 
> On Dec 15, 2006, at 10:32 AM, Simon Wilkinson wrote:
> 
>>
>> On 15 Dec 2006, at 05:51, Quincey Koziol wrote:
>>>
>>>     Any ideas what could be causing the ssh on FreeBSD to "not send a
>>> packet"?
>>
>> The server failing the authentication, for some reason. More
>> information as to why will be in the debug logs from the server.
>>
>> Whilst OpenSSH 3.9p1 is old (August 2004) - there shouldn't be any
>> protocol changes between the GSSAPI support in it, and that in the
>> latest releases.  You don't say what variety (and versions) of
>> Kerberos you are using on each platform - I assume that FreeBSD is
>> Heimdal - are your Linux boxes using MIT Kerberos? What encryption
>> types are you using?
[...]
>> Finding out the error messages from the sshd will go a long why to
>> pointing the finger of blame!
> 
>     Well, here's the output from "sshd -d -d -d -p 2222" on the Linux box:
[...]
> debug1: rexec start in 4 out 4 newsock 4 pipe -1 sock 7

To get sensible debug output from an sshd of that vintage you will need
to add "-e" to the command line to force the debug output to stderr.
(That was fixed in more recent versions.)

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.