Jim Meyering <[EMAIL PROTECTED]> writes: > You asked for details, so I've dug a little more.
> I had an active Kerberos ticket for a domain that was currently only > partially accessible (VPN is up only some of the time, and sometimes > there are only partial routes). When I run kdestroy, it removes the > file in /tmp that ssh was reading from (to get the name of the > unreachable system it hung on, while trying to "sendto"). Once that > file, /tmp/krb5cc_1000, was removed, ssh no longer needed the -o > 'GSSAPIAuthentication no' option to work properly. > Is that enough to go on? Ah, okay, so not Avahi. You have a valid Kerberos configuration and active Kerberos tickets, so ssh wants to do GSSAPI authentication, but your connection to your Kerberos realm is very slow or just times out. Is that a correct summary? I *hope* it's not particularly common to have Kerberos tickets for a realm that isn't responding. -- Russ Allbery ([EMAIL PROTECTED]) <http://www.eyrie.org/~eagle/> -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
