From: David Komanek (xdavid@lib-eth.natur.cuni.cz)
Date: Wed Dec 17 2003 - 06:44:29 EST
Dear managers,
I am trying to get working openssh authentication against gssapi (krb5,
heimdal), but still have problems, somehow related only to tru64 platform
(e.g. on Irix I have no such problems). There are actually two problems:
1. [I am able to solve this editing openssh code]: if gethostname()
returns only short machine name (not fqdn), it fails in gssapi with
"unable find realm" message
2. [really problem for me]: after I solve the problem (1) using fqdn as
the host name, it fails with "Postponed gssapi" message. I do not
understand why I get this. Do I need to edit /etc/sia/matrix.conf somehow
to get gss working ? I notice the problem is not related to privile
separation openssh - using this or not means no change in gss behavior.
Tru64Unix 5.1a - latest patchkit
OpenSSH - latest portable snapshot
Heimdal distrib. of krb5 - latest snapshot
Thanks in advance, I will summarize.
David Komanek
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:49:46 EDT