Re: Solaris 10, GSSAPI and fqhn

[Andreas Haupt <ahaupt@ifh.de>]

On Wed, 16 Feb 2005, Sean Brown wrote:

> ----- Original Message -----
> From: Andreas Haupt <ahaupt@ifh.de>
> Date: Wednesday, February 16, 2005 1:40 am
> Subject: Solaris 10, GSSAPI and fqhn
>
>> Hello,
>>
>> I'm experiencing problems with logging into a Solaris 10 machine
>> using
>> OpenSSH 3.9p1 and authenticating against GSSAPI. The OpenSSH Server
>> prints the following error messages to the logfile in debug mode:
>>
>> Feb 16 08:55:32 nike sshd[20694]: [ID 800047 auth.debug] debug2:
>> input_userauth_request: try method gssapi-with-mic
>> Feb 16 08:55:32 nike sshd[20694]: [ID 800047 auth.debug] debug1:
>> Miscellaneous failure (see text)\nunable to find realm of host nike
>
> Have you created a krb5.conf that states the default realm or have a TXT record in your DNS so the system can look up its default realm?

Yes, it's there. Excerpt from /etc/krb5.conf:

[libdefaults]
         default_realm = IFH.DE

The Solaris 10 machine is set up identically to the Solaris 8 machines
(in the meaning of kerberos and name resolving).

Greetings
Andreas

-- 
| Andreas Haupt                      | E-Mail:  andreas.haupt@desy.de
|  DESY Zeuthen                      | WWW:     http://www.desy.de/~ahaupt
|  Platanenallee 6                   | Phone:   +49/33762/7-7359
|  D-15738 Zeuthen                   | Fax:     +49/33762/7-7216