SUMMARY : Solaris 9 9/05 sshd and kerberos could this be a BUG

From: Saxon, Stuart <Stuart.Saxon_at_centrica.co.uk>
Date: Sat Jun 10 2006 - 13:03:56 EDT
Thanks for the responses.

In the end I have had to make the following changes to my system.

Add
 StrictHostKeyChecking no
To /etc/ssh/ssh_config
Add these
    GSSAPIAuthentication no
    GSSAPIKeyExchange no
    GSSAPIStoreDelegatedCredentials no
To /etc/ssh/sshd_config
And remove
    slave_kdcs
    domain_mapping
From
(/etc/krb5/krb5.conf)

I can now ssh in and out of my test server fine. I am a little concerned
with what the two entries in the krb5.conf file do or do not do ...... I
am no kerberos expert, perhaps someone could enlighten me. I will of
course read up on it also.


-----Original Message-----
Hi There,

Jun  9 21:42:48 sol9-test sshd[1546]: Kerberos mechanism library
initialization error: No profile file open.

I get this message when I initialise a putty session from my laptop to
the sol9-test server immediately after I enter my NIS account name but
not before then entering my NIS passwd.

I have noticed that this was raised by 'loris serena' back in March I
don't see a summary.

http://www.sunmanagers.org/pipermail/sunmanagers/2006-March/039922.html

Is this a BUG/Feature

I am patched up to March 2006 via the EISCD

My ssh version is "Sun_SSH_1.1, SSH protocols 1.5/2.0, OpenSSL
0x0090700f"


Stuart Saxon

_____________________________________________________________________
The information contained in or attached to this email is intended only for
the use of the individual or entity to which it is addressed. If you are not
the intended recipient, or a person responsible for delivering it to the
intended recipient, you are not authorised to and must not disclose, copy,
distribute, or retain this message or any part of it. It may contain
information which is confidential and/or covered by legal professional or
other privilege (or other rules or laws with similar effect in jurisdictions
outside England and Wales).
The views expressed in this email are not necessarily the views of Centrica
plc, and the company, its directors, officers or employees make no
representation or accept any liability for its accuracy or completeness unless
expressly stated to the contrary.
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers
Received on Sat Jun 10 13:04:26 2006

This archive was generated by hypermail 2.1.8 : Thu Mar 03 2016 - 06:43:58 EST