Sorry for the delay. I was not working with that debian testing machine the last days. Now here is the logfile. First I retrieve a ticket using kinit then I try to connect via ssh. Thanks for your help.
Cheers, Erik On Tue, 2011-06-21 at 06:19 -0400, Sam Hartman wrote: > export KRB5_TRACE=/tmp/krb5.log
[532] 1308845006.593803: Getting initial credentials for [email protected] [532] 1308845006.594667: Sending request (187 bytes) to FNAL.GOV [532] 1308845011.781897: Sending initial UDP request to dgram 131.225.110.105:88 [532] 1308845012.2521: Received answer from dgram 131.225.110.105:88 [532] 1308845012.25137: Response was from master KDC [532] 1308845012.25236: Received error from KDC: -1765328359/Additional pre-authentication required [532] 1308845012.25324: Processing preauth types: 2, 11, 3, 13, 12 [532] 1308845012.25397: Selected etype info: etype des-cbc-crc, salt "(null)", params "" [532] 1308845045.491651: AS key obtained for encrypted timestamp: des-cbc-crc/47E5 [532] 1308845045.491822: Encrypted timestamp (for 1308845045.491724): plain 301AA011180F32303131303632333136303430355AA10502030780CC, encrypted 24B454657507E9B468AB9D755D448BB8F89B0D6A6017DFDFEA28A5E1AAA400ACD4FCC147C6AC9592 [532] 1308845045.491864: Produced preauth for next request: 2 [532] 1308845045.491928: Sending request (249 bytes) to FNAL.GOV (master) [532] 1308845045.528491: Sending initial UDP request to dgram 131.225.110.105:88 [532] 1308845045.962483: Received answer from dgram 131.225.110.105:88 [532] 1308845045.962620: Salt derived from principal: FNAL.GOVbrucken [532] 1308845045.962669: AS key determined by preauth: des-cbc-crc/47E5 [532] 1308845045.962794: Decrypted AS reply; session key is: des-cbc-crc/C5A5 [532] 1308845045.962823: FAST negotiation: unavailable [532] 1308845045.962898: Initializing FILE:/tmp/krb5cc_1000 with default princ [email protected] [532] 1308845045.963208: Removing [email protected] -> krbtgt/[email protected] from FILE:/tmp/krb5cc_1000 [532] 1308845045.963242: Storing [email protected] -> krbtgt/[email protected] in FILE:/tmp/krb5cc_1000 [612] 1308845128.82577: Getting credentials [email protected] -> host/[email protected] using ccache FILE:/tmp/krb5cc_1000 [612] 1308845128.82797: Retrieving [email protected] -> host/[email protected] from FILE:/tmp/krb5cc_1000 with result: -1765328243/Matching credential not found [612] 1308845128.82930: Retrieving [email protected] -> krbtgt/[email protected] from FILE:/tmp/krb5cc_1000 with result: 0/success [612] 1308845128.82964: Found cached TGT for service realm: [email protected] -> krbtgt/[email protected] [612] 1308845128.82992: Requesting tickets for host/[email protected], referrals on [612] 1308845128.83185: Generated subkey for TGS request: des-cbc-crc/7792 [612] 1308845128.83225: etypes requested in TGS request: des-cbc-crc, des3-cbc-sha1 [612] 1308845128.83670: Sending request (554 bytes) to FNAL.GOV [612] 1308845128.317999: Sending initial UDP request to dgram 131.225.110.105:88 [612] 1308845129.319232: Sending initial UDP request to dgram 131.225.9.4:88 [612] 1308845129.575844: Received answer from dgram 131.225.9.4:88 [612] 1308845129.597908: Response was not from master KDC [612] 1308845129.597985: TGS request result: -1765328371/KDC can't fulfill requested option [612] 1308845129.633826: Getting credentials [email protected] -> host/[email protected] using ccache FILE:/tmp/krb5cc_1000 [612] 1308845129.633950: Retrieving [email protected] -> host/[email protected] from FILE:/tmp/krb5cc_1000 with result: -1765328243/Matching credential not found [612] 1308845129.634050: Retrieving [email protected] -> krbtgt/[email protected] from FILE:/tmp/krb5cc_1000 with result: 0/success [612] 1308845129.634084: Found cached TGT for service realm: [email protected] -> krbtgt/[email protected] [612] 1308845129.634108: Requesting tickets for host/[email protected], referrals on [612] 1308845129.634149: Generated subkey for TGS request: des-cbc-crc/B661 [612] 1308845129.634185: etypes requested in TGS request: des-cbc-crc, des3-cbc-sha1 [612] 1308845129.634330: Sending request (554 bytes) to FNAL.GOV [612] 1308845129.824244: Sending initial UDP request to dgram 131.225.110.105:88 [612] 1308845130.825562: Sending initial UDP request to dgram 131.225.9.4:88 [612] 1308845131.314458: Received answer from dgram 131.225.9.4:88 [612] 1308845131.337645: Response was not from master KDC [612] 1308845131.337766: TGS request result: -1765328371/KDC can't fulfill requested option [612] 1308845131.384923: Getting credentials [email protected] -> host/[email protected] using ccache FILE:/tmp/krb5cc_1000 [612] 1308845131.385056: Retrieving [email protected] -> host/[email protected] from FILE:/tmp/krb5cc_1000 with result: -1765328243/Matching credential not found [612] 1308845131.385156: Retrieving [email protected] -> krbtgt/[email protected] from FILE:/tmp/krb5cc_1000 with result: 0/success [612] 1308845131.385190: Found cached TGT for service realm: [email protected] -> krbtgt/[email protected] [612] 1308845131.385215: Requesting tickets for host/[email protected], referrals on [612] 1308845131.385261: Generated subkey for TGS request: des-cbc-crc/6A24 [612] 1308845131.385296: etypes requested in TGS request: des-cbc-crc, des3-cbc-sha1 [612] 1308845131.385442: Sending request (554 bytes) to FNAL.GOV [612] 1308845131.577174: Sending initial UDP request to dgram 131.225.110.105:88 [612] 1308845132.578374: Sending initial UDP request to dgram 131.225.9.4:88 [612] 1308845132.812365: Received answer from dgram 131.225.9.4:88 [612] 1308845132.832888: Response was not from master KDC [612] 1308845132.832956: TGS request result: -1765328371/KDC can't fulfill requested option [612] 1308845132.868768: Getting credentials [email protected] -> host/[email protected] using ccache FILE:/tmp/krb5cc_1000 [612] 1308845132.868885: Retrieving [email protected] -> host/[email protected] from FILE:/tmp/krb5cc_1000 with result: -1765328243/Matching credential not found [612] 1308845132.868927: Getting credentials [email protected] -> krbtgt/[email protected] using ccache FILE:/tmp/krb5cc_1000 [612] 1308845132.869026: Retrieving [email protected] -> krbtgt/[email protected] from FILE:/tmp/krb5cc_1000 with result: 0/success [612] 1308845132.869089: Getting credentials [email protected] -> host/[email protected] using ccache FILE:/tmp/krb5cc_1000 [612] 1308845132.869185: Retrieving [email protected] -> host/[email protected] from FILE:/tmp/krb5cc_1000 with result: -1765328243/Matching credential not found [612] 1308845132.869279: Retrieving [email protected] -> krbtgt/[email protected] from FILE:/tmp/krb5cc_1000 with result: 0/success [612] 1308845132.869311: Found cached TGT for service realm: [email protected] -> krbtgt/[email protected] [612] 1308845132.869335: Requesting tickets for host/[email protected], referrals on [612] 1308845132.869377: Generated subkey for TGS request: des-cbc-crc/41C0 [612] 1308845132.869408: etypes requested in TGS request: des-cbc-crc, des3-cbc-sha1
