Date: Fri, 16 Dec 2022 18:06:21 +0000 From: bugzilla-noreply@freebsd.org To: bugs@FreeBSD.org Subject: [Bug 268186] Kerberos authentication fails with a Linux/FreeIPA KDC Message-ID: <bug-268186-227-eRW6u3UbKL@https.bugs.freebsd.org/bugzilla/> In-Reply-To: <bug-268186-227@https.bugs.freebsd.org/bugzilla/> References: <bug-268186-227@https.bugs.freebsd.org/bugzilla/>
next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D268186 --- Comment #24 from Cy Schubert <cy@FreeBSD.org> --- (In reply to amendlik from comment #23) Correct. You misunderstand. FreeIPA has an MIT KRB5 KDC running on top of Linux O/S. I an running and have tested on a MIT KRB5 KDC running on a FreeBSD O/S. Th= ere is no FreeBSD native Heimdal KDC involved whatsoever. The MIT KRB5 KDC I am running supports those ciphers. The FreeIPA KDC does not. FreeBSD native Heimdal works with MIT KRB5 KDC. Using a Fedora 36 OpenSSH client with a TGT from my MIT KRB5 KDC to connect to a FreeBSD OpenSSH serv= er linked against Heimdal also works. I use this to connect from $JOB and my FreeBSD network. Can you please try the OpenSSH patch I posted and rely entirely on PAM? Otherwise I cannot tell if the calls to native Heimdal libraries by OpenSSH= are involved with this problem. Until such time this test is performed I must r= ely entirely on my testing to conclude that FreeBSD Heimdal libraries work with= an MIT KRB5 KDC, which I have been using here for two and a half decades now. --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-268186-227-eRW6u3UbKL>