Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 16 Jul 2009 22:00:44 +1000
From:      John Marshall <john.marshall@riverwillow.com.au>
To:        freebsd-current@freebsd.org
Subject:   Re: sshd GSSAPIAuthentication broken after 8.0-BETA1 upgrade
Message-ID:  <20090716120043.GC17677@rwpc12.mby.riverwillow.net.au>
In-Reply-To: <20090714053357.GH982@rwpc12.mby.riverwillow.net.au>
References:  <20090708085202.GS1025@rwpc12.mby.riverwillow.net.au> <20090714053357.GH982@rwpc12.mby.riverwillow.net.au>

next in thread | previous in thread | raw e-mail | index | archive | help

--YD3LsXFS42OYHhNZ
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Tue, 14 Jul 2009, 15:33 +1000, John Marshall wrote:
> On Wed, 08 Jul 2009, 18:52 +1000, John Marshall wrote:
> > I source upgraded a (test) server here (i386) from 7.2-RELEASE-p2 to
> > 8.0-BETA1 this morning.  I use GSSAPI as the primary authentication
> > method for sshd on that server.  After the upgrade GSSAPI authentication
> > stopped working and I can't get enough information to figure out why.
> > Perhaps the newer version of Heimdal behaves differently?  Perhaps the
> > newer version of sshd behaves differently?

I think I've isolated this to the newer version of OpenSSH (5.2p1).
Another service (squid) on this 8.0-BETA1 server authenticates clients
via GSSAPI with no complaint.  If I install the OpenSSH port (5.2p1) on
a 7.2-RELEASE server I am seeing the same problem I am observing on
8.0-BETA1.

--=20
John Marshall

--YD3LsXFS42OYHhNZ
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.11 (FreeBSD)

iEYEARECAAYFAkpfFmsACgkQw/tAaKKahKIOzACgyE5pmPgg+Th+izSbtPCduY0R
CbUAn33JNtddIYVDawzIq7z0I2Fa41eT
=TUya
-----END PGP SIGNATURE-----

--YD3LsXFS42OYHhNZ--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20090716120043.GC17677>