Excerpts from Jason Nett's message of Sun Oct 16 06:46:07 UTC 2011: > Upon a fresh install of Ubuntu 11.10, I still have problems with ssh. After > studying it all day, I believe that the problem has something to do with ssh > not being able to communicate a valid kerberos ticket via "gssapi-with-mic". > > The problem area of the verbose output looks like: > ---------------------------------------- > debug1: Next authentication method: gssapi-with-mic > debug1: Unspecified GSS failure. Minor code may provide more information > KDC can't fulfill requested option > > debug1: Unspecified GSS failure. Minor code may provide more information > KDC can't fulfill requested option > > debug1: Unspecified GSS failure. Minor code may provide more > information > > > debug2: we sent a gssapi-with-mic packet, wait for reply > ------------------------------------------- > > where it should look like (according to the successful execution on my > laptop that is still running 11.04): > > -------------------------------------------- > debug1: Next authentication method: gssapi-with-mic > debug2: we sent a gssapi-with-mic packet, wait for reply > debug1: Authentication succeeded (gssapi-with-mic). > Authenticated to <name>.<org>.gov ([1xx.xxx.xxx.xxx]:xx). > ---------------------------------------------- > > If I look at the version numbers of the ssh packages installed with "dpkg -l > | grep ssh", Ubuntu 11.10 has: > > ii openssh-client > 1:5.8p1-7ubuntu1 secure shell (SSH) client, for > secure access to remote machines > ii ssh-askpass-gnome > 1:5.8p1-7ubuntu1 interactive X program to prompt > users for a passphrase for ssh-add > > while 11.04 has > > ii openssh-client 1:5.8p1-1ubuntu3 > secure shell (SSH) client, for secure access to > remote machines > ii ssh-askpass-gnome 1:5.8p1-1ubuntu3 > interactive X program to prompt users for a > passphrase for ssh-add > > > I've searched through every configuration file I can find, especially those > in ./ssh/ and /etc/ssh/, but have not been able to solve the problem or > produce any different results. The best I can think of is that there's > something about the newer versions that gssapi-with-mic is not agreeing well > with. > > I would greatly appreciate if this bug could be fixed because it affects my > ability to work remotely from home.
Jason, you are using kerberos auth.. can you do kinit user@KERBEROS.DOMAIN and get assigned kerberos credentials? (klist should show them) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/874518 Title: ssh fails after upgrade to 11.10 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/874518/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
