Re: OpenSSH 4.3p2 -> 4.3p2; gssapi problem.

On 24 Jul 2007, at 04:17, Edward Roper wrote:


>    debug1: Miscellaneous failure
>    Key table entry not found

This is the important error. You don't have a key in your keytab that  
matches what the client is trying to use. In general this occurs for  
one of two reasons. Either there is a key version number mismatch  
between that which the client is using, and that available to the  
server, or your host's hostname doesn't match it's DNS name (OpenSSH  
uses the hostname to determine which key to use as an acceptor)

Try running 'kvno host/anubis.domain.com@DOMAIN.COM' on your client,  
and check that the version number you obtain there matches that in  
your keytab. Check that hostname is anubis.domain.com.

If both of those fail, you may be into the murky waters of encryption  
types. You have to ensure that the KDC doesn't have keys for host/ 
anubis... that you haven't exported to the keytab. Use klist -e to  
check the encryption types for the host/anubis... entry in your  
credentials cache, and make sure that the listed encryption type  
matches the one in your keytab.

Cheers,

Simon.