<html><body><div style="font-family: arial,helvetica,sans-serif; font-size: 12pt; color: #000000"><div><img src="cid:ee4193cec8f2f0be5ce03d71673f0cf2ad2a01ee@zimbra" data-mce-src="cid:ee4193cec8f2f0be5ce03d71673f0cf2ad2a01ee@zimbra"></div><div><br></div><div><br data-mce-bogus="1"></div><div>When logging in, putty only shows:</div><div>Using username "drextrha@net.dr.dk".<br>drextrha@net.dr.dk@rhel02udv.linux.dr.dk's password:<br><br></div><div>Putty log shows its only using SSPI, secur32.dll for GSSAPI, but fails:</div><div><br data-mce-bogus="1"></div><div>Event Log: Using SSPI from SECUR32.DLL<br>Event Log: Attempting GSSAPI authentication<br>Outgoing packet #0x6, type 50 / 0x32 (SSH2_MSG_USERAUTH_REQUEST)<br> 00000000 00 00 00 12 64 72 65 78 74 72 68 61 40 6e 65 74 ....drextrha@net<br> 00000010 2e 64 72 2e 64 6b 00 00 00 0e 73 73 68 2d 63 6f .dr.dk....ssh-co<br> 00000020 6e 6e 65 63 74 69 6f 6e 00 00 00 0f 67 73 73 61 nnection....gssa<br> 00000030 70 69 2d 77 69 74 68 2d 6d 69 63 00 00 00 01 00 pi-with-mic.....<br> 00000040 00 00 0b 06 09 2a 86 48 86 f7 12 01 02 02 .....*.H......<br>Incoming packet #0x6, type 60 / 0x3c (SSH2_MSG_USERAUTH_GSSAPI_RESPONSE)<br> 00000000 00 00 00 0b 06 09 2a 86 48 86 f7 12 01 02 02 ......*.H......<br>Event Log: GSSAPI authentication initialisation failed<br>Event Log: The target was not recognized.</div><div><br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div><span id="zwchr" data-marker="__DIVIDER__">----- On Sep 7, 2016, at 9:27 AM, Alexander Bokovoy <abokovoy@redhat.com> wrote:<br></span></div><div data-marker="__QUOTED_TEXT__"><blockquote style="border-left: 2px solid #1010FF; margin-left: 5px; padding-left: 5px; color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;" data-mce-style="border-left: 2px solid #1010FF; margin-left: 5px; padding-left: 5px; color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;">On Wed, 07 Sep 2016, Troels Hansen wrote:<br><div data-marker="__QUOTED_TEXT__"><blockquote style="border-left: 2px solid #1010FF; margin-left: 5px; padding-left: 5px; color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;" data-mce-style="border-left: 2px solid #1010FF; margin-left: 5px; padding-left: 5px; color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;">Running RHEL 7.2, IPA 4.2 and SSSD 1.13, we have set up a IPA-AD trust<br>and trying to get Putty GSSAPI login to work. In Putty GSSAPI have<br>been enabled, and GSSAPI is enabled in sshd.<br><br>Logging in using password from Windows to Linux works, and logging in<br>from Linux to Linux using kerberos works.<br><br>AD trust is a follows:<br><br># ipa trust-find<br>----------------<br>2 trusts matched<br>----------------<br>Realm name: net.dr.dk<br>Domain NetBIOS name: NET<br>Domain Security Identifier: S-1-5-21-xxxxxxxxx-xxxxxxxx-xxxxxxxx<br><br>Realm name: place.dr.dk<br>Domain NetBIOS name: PLACE<br>Domain Security Identifier: S-1-5-21-xxxxxx-xxxxxx-xxxxxxx<br>Trust type: Active Directory domain<br>----------------------------<br>Number of entries returned 2<br>----------------------------<br><br># ipa trust-show place.dr.dk<br>Realm name: place.dr.dk<br>Domain NetBIOS name: PLACE<br>Domain Security Identifier: S-1-5-21-xxxx-xxxx-xxxxx<br>Trust direction: Trusting forest<br>Trust type: Active Directory domain<br><br># ipa trust-show net.dr.dk<br>Realm name: net.dr.dk<br>Domain NetBIOS name: NET<br>Domain Security Identifier: S-1-5-21-xxxxxxxxxxxxx-xxxxxxxxxxxx-xxxxxxxxxx<br><br>users are located in net.dr.dk.<br><br><div data-marker="__QUOTED_TEXT__"><blockquote style="border-left: 2px solid #1010FF; margin-left: 5px; padding-left: 5px; color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;" data-mce-style="border-left: 2px solid #1010FF; margin-left: 5px; padding-left: 5px; color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;">From looking at the doc's this should just work... However, can't get<br>it to work. Am I missing something?</blockquote></div></blockquote></div><br> Make screenshots of PuTTY screens showing what you configured and what<br> does not work. You can also ask PuTTY to generate logs.<br> <br> --<br> / Alexander Bokovoy<br><br></blockquote></div><div><br></div><div data-marker="__SIG_POST__">--</div><div><p style="margin: 5px 0px 0px; font-family: arial,verdana,sans-serif; font-size: 12px;" data-mce-style="margin: 5px 0px 0px; font-family: arial,verdana,sans-serif; font-size: 12px;">Med venlig hilsen</p><p style="margin: 10px 0px 0px; font-family: arial,verdana,sans-serif; font-size: 14px;" data-mce-style="margin: 10px 0px 0px; font-family: arial,verdana,sans-serif; font-size: 14px;"><b>Troels Hansen</b></p><p style="margin: 3px 0px 0px; font-family: arial,verdana,sans-serif; font-size: 12px;" data-mce-style="margin: 3px 0px 0px; font-family: arial,verdana,sans-serif; font-size: 12px;">Systemkonsulent</p><p style="margin: 4px 2px 0px 0px; font-family: arial,verdana,sans-serif; color: #4c4c4c; font-size: 14px; font-weight: bold;" data-mce-style="margin: 4px 2px 0px 0px; font-family: arial,verdana,sans-serif; color: #4c4c4c; font-size: 14px; font-weight: bold;">Casalogic A/S</p><div><img src="http://www.casalogic.dk/signatur/casalogic_green_spacer_line.png" border="0" data-mce-src="http://www.casalogic.dk/signatur/casalogic_green_spacer_line.png"></div><p style="margin: 5px 0px 0px; font-family: arial,verdana,sans-serif; font-size: 12px;" data-mce-style="margin: 5px 0px 0px; font-family: arial,verdana,sans-serif; font-size: 12px;">T (+45) 70 20 10 63</p><p style="margin: 5px 0px 0px; font-family: arial,verdana,sans-serif; font-size: 12px;" data-mce-style="margin: 5px 0px 0px; font-family: arial,verdana,sans-serif; font-size: 12px;">M (+45) 22 43 71 57</p><div><a title="Download vCard" href="http://www.casalogic.dk/signatur/th.vcf" data-mce-href="http://www.casalogic.dk/signatur/th.vcf"><img src="http://www.casalogic.dk/signatur/vcard_download_small.png" border="0" data-mce-src="http://www.casalogic.dk/signatur/vcard_download_small.png"></a> <a title="Follow us on LinkedIn" href="http://www.linkedin.com/company/67524" data-mce-href="http://www.linkedin.com/company/67524"><img src="http://www.casalogic.dk/signatur/linkedin_logo_20x20.png" border="0" data-mce-src="http://www.casalogic.dk/signatur/linkedin_logo_20x20.png"></a> <a title="Follow us on Twitter" href="http://twitter.com/casalogic" data-mce-href="http://twitter.com/casalogic"><img src="http://www.casalogic.dk/signatur/twitter_logo_20x20.png" border="0" data-mce-src="http://www.casalogic.dk/signatur/twitter_logo_20x20.png"></a></div><div>Red Hat, SUSE, VMware, Citrix, Novell, Yellowfin BI, EnterpriseDB, Sophos og meget mere.</div></div></div></body></html>