Re: Problems using gssapi authentication from FreeBSD to Linux machines

Quincey Koziol wrote:
> On Dec 15, 2006, at 10:32 AM, Simon Wilkinson wrote:
>
> > On 15 Dec 2006, at 05:51, Quincey Koziol wrote:
> > >     Any ideas what could be causing the ssh on FreeBSD to "not send a
> > > packet"?
> >
> > The server failing the authentication, for some reason. More
> > information as to why will be in the debug logs from the server.
> >
> > Whilst OpenSSH 3.9p1 is old (August 2004) - there shouldn't be any
> > protocol changes between the GSSAPI support in it, and that in the
> > latest releases.  You don't say what variety (and versions) of
> > Kerberos you are using on each platform - I assume that FreeBSD is
> > Heimdal - are your Linux boxes using MIT Kerberos? What encryption
> > types are you using?
[...]
> > Finding out the error messages from the sshd will go a long why to
> > pointing the finger of blame!
>
>     Well, here's the output from "sshd -d -d -d -p 2222" on the Linux box:
[...]
> debug1: rexec start in 4 out 4 newsock 4 pipe -1 sock 7

To get sensible debug output from an sshd of that vintage you will need
to add "-e" to the command line to force the debug output to stderr.
(That was fixed in more recent versions.)

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.