Kerberize SSH: Difference between revisions
From Leo's Notes
This page was last edited on 1 September 2019, at 06:20.
No edit summary |
m Text replacement - "Category:Linux{{Navbox Linux}}" to "{{Navbox Linux}}Category:Linux" |
||
| (3 intermediate revisions by the same user not shown) | |||
| Line 10: | Line 10: | ||
=== TGT failed verification === | === TGT failed verification === | ||
From | From {{code|/var/log/secure}}, after attempting to log in, you get: | ||
<syntaxhighlight lang="text" line start="1" enclose="div"> | <syntaxhighlight lang="text" line start="1" enclose="div"> | ||
May 6 16:33:59 cs1 sshd[2158]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=localhost user=leo1 | May 6 16:33:59 cs1 sshd[2158]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=localhost user=leo1 | ||
| Line 20: | Line 20: | ||
[[Category:Kerberos]] | [[Category:Kerberos]] | ||
[[Category:Linux]] | {{Navbox Linux}}[[Category:Linux]] | ||
Latest revision as of 06:20, 1 September 2019
Configuration
Your sshd_config should have
UsePAM yes
Troubleshoot
TGT failed verification
From /var/log/secure, after attempting to log in, you get:
May 6 16:33:59 cs1 sshd[2158]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=localhost user=leo1
May 6 16:33:59 cs1 sshd[2158]: pam_krb5[2158]: TGT failed verification using keytab and key for 'host/cs1.cs.cpsc.ucalgary.ca@CS.CPSC.UCALGARY.CA': Server not found in Kerberos database
May 6 16:33:59 cs1 sshd[2158]: pam_krb5[2158]: authentication fails for 'leo1' (leo1@CS.CPSC.UCALGARY.CA): Authentication failure (Success)
May 6 16:34:01 cs1 sshd[2158]: Failed password for leo1 from ::1 port 46729 ssh2