Trouble with Kerberos and SSH
807557Nov 3 2006 — edited Nov 6 2006I'm working in a test environment to configure Solaris 10 hosts to authenticate against an Active Directory environment using LDAP and Kerberos. I have all of the hard parts done - I can login locally, ssh, telnet, ftp, etc to the Solaris 10 device using a username/password within the Active Directory.
I am having trouble, however, getting SSH to forward Kerberos tickets for passwordless authentication. I can login locally to a Solaris box, run a klist to verify that I have a Kerberos ticket, and the ssh to another Solaris 10/Kerberos box, but I am still prompted for my password. Below is a snippet of SSH debug traffic:
debug1: GSS-API error while calling GSS_Init_sec_context(): An invalid name was supplied
service not available
debug1: Skipping GSS-API mechanism kerberos_v5 (An invalid name was supplied
service not available
)
No amount of googling has been able to help me thus far. Perhaps you can.