Dear managers,
I am trying to get working openssh authentication against gssapi (krb5,
heimdal), but still have problems, somehow related only to tru64 platform
(e.g. on Irix I have no such problems). There are actually two problems:
1. [I am able to solve this editing openssh code]: if gethostname()
returns only short machine name (not fqdn), it fails in gssapi with
"unable find realm" message
2. [really problem for me]: after I solve the problem (1) using fqdn as
the host name, it fails with "Postponed gssapi" message. I do not
understand why I get this. Do I need to edit /etc/sia/matrix.conf somehow
to get gss working ? I notice the problem is not related to privile
separation openssh - using this or not means no change in gss behavior.
Tru64Unix 5.1a - latest patchkit
OpenSSH - latest portable snapshot
Heimdal distrib. of krb5 - latest snapshot
Thanks in advance, I will summarize.
David Komanek
Received on Wed Dec 17 2003 - 11:46:45 NZDT