From owner-freebsd-questions@freebsd.org  Mon Sep 12 16:52:17 2016
Return-Path: <owner-freebsd-questions@freebsd.org>
Delivered-To: freebsd-questions@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 450D0BD82DA
 for <freebsd-questions@mailman.ysv.freebsd.org>;
 Mon, 12 Sep 2016 16:52:17 +0000 (UTC)
 (envelope-from jasoncwells@fastmail.com)
Received: from out4-smtp.messagingengine.com (out4-smtp.messagingengine.com
 [66.111.4.28])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id 1C5F195
 for <freebsd-questions@freebsd.org>; Mon, 12 Sep 2016 16:52:16 +0000 (UTC)
 (envelope-from jasoncwells@fastmail.com)
Received: from compute3.internal (compute3.nyi.internal [10.202.2.43])
 by mailout.nyi.internal (Postfix) with ESMTP id AFC7E209C1
 for <freebsd-questions@freebsd.org>; Mon, 12 Sep 2016 12:52:15 -0400 (EDT)
Received: from frontend2 ([10.202.2.161])
 by compute3.internal (MEProxy); Mon, 12 Sep 2016 12:52:15 -0400
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=fastmail.com; h=
 content-type:date:from:message-id:mime-version:subject:to
 :x-sasl-enc:x-sasl-enc; s=mesmtp; bh=vjy4gbbZFmTJt/XSwRJyeSTPZ0E
 =; b=B2yvfE8/RKN6JiwLcvc5dklDroJdmXhUzgwRzz8tj5qcXSAJRdx3pAQKq+f
 0pA0R27P1SqLiB/HUGC5cL1/i9vYYg47nzLm+ERAoP4EnD3oWqAvgyWYskhMCeIQ
 5rt5eDE4u4t2qgRFsLbQdjyXG2R7+Cnm39/vz8DkjOBB6Gnc=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=
 messagingengine.com; h=content-type:date:from:message-id
 :mime-version:subject:to:x-sasl-enc:x-sasl-enc; s=smtpout; bh=vj
 y4gbbZFmTJt/XSwRJyeSTPZ0E=; b=BJZYZQCy/wXec+ENhnqxWJORGCjWUt4TLB
 kQxd+wr2vOR1Bre6jJBbshMt/1jXShr6CamtbJ4nST5ZNDVl68NsFTH18XSMG4s4
 /Oxz2YX1FvRZZNG4p3SmzBzQu6/ZWlJVEG3htUtTe9S4SxFcarwfvh2kVF4K0sXd
 jMAyyF/x8=
X-Sasl-enc: uDNHLo6PP2xPrsMZotlp+F+kv48BZq2TNihD6M76eEou 1473699135
Received: from [192.168.1.195] (97-113-189-48.tukw.qwest.net [97.113.189.48])
 by mail.messagingengine.com (Postfix) with ESMTPA id 36A16CCE8B
 for <freebsd-questions@freebsd.org>; Mon, 12 Sep 2016 12:52:15 -0400 (EDT)
To: freebsd-questions@freebsd.org
From: "Jason C. Wells" <jasoncwells@fastmail.com>
Subject: Telnetd does not offer KERBEROS_V5 authentication
Message-ID: <ad4e573c-01d0-16be-8ff6-dd0d2565f91e@fastmail.com>
Date: Mon, 12 Sep 2016 09:52:11 -0700
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101
 Thunderbird/45.2.0
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Content-Filtered-By: Mailman/MimeDel 2.1.23
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.23
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions/>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 12 Sep 2016 16:52:17 -0000

When I attempt to telnet to a FreeBSD 10.3 host, the telnetd does not 
offer KERBEROS_V5 as an authentication method. With debugging turned on, 
I see only:

    td: recv suboption AUTHENTICATION IS NULL CLIENT | ONE-WAY

inetd.conf  has 'telnetd -a valid'. The host principal exists and has 
been added to the telnetd host's keytab. Pam is configured to enable 
pam_krb5. 'ldd /usr/libexec/telnetd' shows that libkrb5 is linked.

How do I enable Kerberos authentication for telnetd in FreeBSD 10.3?

Regards,
Jason C. Wells