Re: recursive ssh invocation

From: Andrei Alexandrescu (See Website For Email) (SeeWebsiteForEmail_at_moderncppdesign.com)
Date: 05/29/05

  • Next message: Vincent: "Re: Permission denied (publickey,keyboard-interactive)." 
    Date: Sun, 29 May 2005 10:45:00 -0700

    Richard E. Silverman wrote:
    >>>>>>"AA" == Andrei Alexandrescu (See Website for Email) <seewebsiteforemail@moderncppdesign.com> writes:
    >
    >
    > AA> Thanks to all who've answered. Indeed, my net uses Kerberos with
    > AA> OpenSSH on Linux...
    >
    > Then the snippet you posted does in fact indicate the problem.
    >
    > AA> For reasons I don't get, however, the procedure fails on recursive
    > AA> invocations.
    >
    > It fails because you have Kerberos credentials on the first machine, but
    > not on the second: you need ticket forwarding. Set
    > GSSAPIDelegateCredentials=yes on the client, and make sure you have
    > forwardable tickets:

    Yay, that worked like a charm! Thanks a lot, Richard!

    Andrei

  • Next message: Vincent: "Re: Permission denied (publickey,keyboard-interactive)."

    Relevant Pages

    • How do _you_ integrate Kerberos and Solaris 8/9/10?
      ... into your Solaris 8/9/10 systems? ... nitpicks - SSH stores any forwarded kerberos credentials into /tmp/krb5cc_$uid ... and thus ticket forwarding doesn't work. ... SSH GSSAPI_KEX ticket forwarding works but it doesn't integrate ...
      (comp.sys.sun.admin)
    • Re: Kerberos And Openssh 3.8p1 single sign-on
      ... >(ticket forwarding) and have been unsuccesful at it. ... >successfully compile openssh-3.8.1p1 and build it against kerberos libraries. ... >single sign-on on the server without any problems. ... >openssh implementation authorizing through kerberos. ...
      (comp.security.ssh)
    • Kerberos And Openssh 3.8p1 single sign-on
      ... I have been trying to get openssh to work with kerberos using single sign-on ... successfully compile openssh-3.8.1p1 and build it against kerberos libraries. ... Openssh does not allow me to use single-signon (ticket forwarding). ...
      (comp.security.ssh)