[Bug 749983] [NEW] GSSAPI auth fails when incorrect reverse

[Niklas Jakobsson]

Public bug reported:

After upgrading to 10.10 I can no longer log into a server with a
reverse differs from the hostname.

I have 'rdns = false' in my krb5.conf and 'GSSAPITrustDns no"  and i still get:
debug1: Unspecified GSS failure.  Minor code may provide more information
Server not found in Kerberos database

Checking the KDC log also verifies that ssh tries to use the reverse
name.

$ lsb_release -rd
Description:    Ubuntu 10.10
Release:        10.10

$ apt-cache policy openssh-client
openssh-client:
  Installed: 1:5.5p1-4ubuntu5
  Candidate: 1:5.5p1-4ubuntu5
  Version table:
 *** 1:5.5p1-4ubuntu5 0
        500 http://se.archive.ubuntu.com/ubuntu/ maverick-updates/main amd64 Packages
        100 /var/lib/dpkg/status
     1:5.5p1-4ubuntu4 0
        500 http://se.archive.ubuntu.com/ubuntu/ maverick/main amd64 Packages

** Affects: openssh (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/749983

Title:
  GSSAPI auth fails when incorrect reverse