From owner-freebsd-hackers  Sat Mar 18  3: 1:16 2000
Delivered-To: freebsd-hackers@freebsd.org
Received: from axl.ops.uunet.co.za (axl.ops.uunet.co.za [196.31.1.175])
	by hub.freebsd.org (Postfix) with ESMTP id CBD3937B57C
	for <freebsd-hackers@freebsd.org>; Sat, 18 Mar 2000 03:01:12 -0800 (PST)
	(envelope-from sheldonh@axl.ops.uunet.co.za)
Received: from sheldonh (helo=axl.ops.uunet.co.za)
	by axl.ops.uunet.co.za with local-esmtp (Exim 3.13 #1)
	id 12WGyj-0000Tb-00
	for freebsd-hackers@FreeBSD.org; Sat, 18 Mar 2000 13:01:09 +0200
From: Sheldon Hearn <sheldonh@uunet.co.za>
To: freebsd-hackers@FreeBSD.org
Subject: Re: openssh + krb5 
In-reply-to: Your message of "Sat, 18 Mar 2000 11:29:40 +0200."
             <578.953371780@axl.ops.uunet.co.za> 
Date: Sat, 18 Mar 2000 13:01:09 +0200
Message-ID: <1834.953377269@axl.ops.uunet.co.za>
Sender: owner-freebsd-hackers@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG



On Sat, 18 Mar 2000 11:29:40 +0200, Sheldon Hearn wrote:

> First, sshd doesn't recognize the KerberosAuthentication,
> KerberosOrLocalPasswd nor KerberosTgtPassing options in sshd_config.

Please ignore this.  I was being a complete dufus.  If you only compile
with MAKE_KERBEROS5=YES, then KerberosAuthentication is _obviously_ not
valid -- it should be Kerberos5Authentication! :-)

So now the problem is this:

$ ssh -v -l root axl.ops
[...]
debug: Trying Kerberos V5 authentication.
ssh in free(): warning: chunk is already free.
[...]

Pretty weird.  We get an error back from krb5_get_credentials() in
try_krb5_authentication(), but I'll see what I can come up with.

Ciao,
Sheldon.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message