[Bug 874518] Re: ssh fails after upgrade to 11.10

[Clint Byrum]

Excerpts from Jason Nett's message of Sun Oct 16 06:46:07 UTC 2011:
> Upon a fresh install of Ubuntu 11.10, I still have problems with ssh.  After
> studying it all day, I believe that the problem has something to do with ssh
> not being able to communicate a valid kerberos ticket via "gssapi-with-mic".
> 
> The problem area of the verbose output looks like:
> ----------------------------------------
> debug1: Next authentication method: gssapi-with-mic
> debug1: Unspecified GSS failure.  Minor code may provide more information
> KDC can't fulfill requested option
> 
> debug1: Unspecified GSS failure.  Minor code may provide more information
> KDC can't fulfill requested option
> 
> debug1: Unspecified GSS failure.  Minor code may provide more
> information
> 
> 
> debug2: we sent a gssapi-with-mic packet, wait for reply
> -------------------------------------------
> 
> where it should look like (according to the successful execution on my
> laptop that is still running 11.04):
> 
> --------------------------------------------
> debug1: Next authentication method: gssapi-with-mic
> debug2: we sent a gssapi-with-mic packet, wait for reply
> debug1: Authentication succeeded (gssapi-with-mic).
> Authenticated to <name>.<org>.gov ([1xx.xxx.xxx.xxx]:xx).
> ----------------------------------------------
> 
> If I look at the version numbers of the ssh packages installed with "dpkg -l
> | grep ssh", Ubuntu 11.10 has:
> 
> ii  openssh-client
> 1:5.8p1-7ubuntu1                        secure shell (SSH) client, for
> secure access to remote machines
> ii  ssh-askpass-gnome
> 1:5.8p1-7ubuntu1                        interactive X program to prompt
> users for a passphrase for ssh-add
> 
> while 11.04 has
> 
> ii  openssh-client                         1:5.8p1-1ubuntu3
>                        secure shell (SSH) client, for secure access to
> remote machines
> ii  ssh-askpass-gnome                      1:5.8p1-1ubuntu3
>                        interactive X program to prompt users for a
> passphrase for ssh-add
> 
> 
> I've searched through every configuration file I can find, especially those
> in ./ssh/ and /etc/ssh/, but have not been able to solve the problem or
> produce any different results.  The best I can think of is that there's
> something about the newer versions that gssapi-with-mic is not agreeing well
> with.
> 
> I would greatly appreciate if this bug could be fixed because it affects my
> ability to work remotely from home.

Jason, you are using kerberos auth.. can you do

kinit user at KERBEROS.DOMAIN

and get assigned kerberos credentials? (klist should show them)

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/874518

Title:
  ssh fails after upgrade to 11.10

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/874518/+subscriptions