<div dir="ltr">Hello,<div><br></div><div>I now have a working two-way trust between Active Directory (<a href="http://clients.rdmedia.com">clients.rdmedia.com</a>) and FreeIPA (<a href="http://i.rdmedia.com">i.rdmedia.com</a>). Users from the AD can authenticate to FreeIPA hosts and the other way around. Great!</div><div><br></div><div>Next, I'm trying to achieve passwordless Single Sign On through GSSAPI for Windows clients to FreeIPA hosts. This doesn't seem to be working, despite setting ipa host-mod --ok-as-delegate=TRUE</div><div><br></div><div>To be clear, what I'm trying to do: log in from an AD account (adm.tiemen), from an AD host (<a href="http://leon.clients.rdmedia.com">leon.clients.rdmedia.com</a>) to a FreeIPA host (<a href="http://neodymium.test.ams.i.rdmedia.com">neodymium.test.ams.i.rdmedia.com</a>) with the same AD account. I expect to be logged in through GSSAPI, instead I get a password prompt. </div><div><br></div><div>Is this supposed to work? Did I miss something?</div><div><br></div><div>Below the SSH log from the FreeIPA host with LogLevel DEBUG3:</div><div><br></div><div><div>May 2 17:10:32 neodymium sshd[572]: debug3: fd 5 is not O_NONBLOCK</div><div>May 2 17:10:32 neodymium sshd[572]: debug1: Forked child 752.</div><div>May 2 17:10:32 neodymium sshd[572]: debug3: send_rexec_state: entering fd = 8 config len 922</div><div>May 2 17:10:32 neodymium sshd[572]: debug3: ssh_msg_send: type 0</div><div>May 2 17:10:32 neodymium sshd[572]: debug3: send_rexec_state: done</div><div>May 2 17:10:32 neodymium sshd[752]: debug3: oom_adjust_restore</div><div>May 2 17:10:32 neodymium sshd[752]: Set /proc/self/oom_score_adj to 0</div><div>May 2 17:10:32 neodymium sshd[752]: debug1: rexec start in 5 out 5 newsock 5 pipe 7 sock 8</div><div>May 2 17:10:32 neodymium sshd[752]: debug1: inetd sockets after dupping: 3, 3</div><div>May 2 17:10:32 neodymium sshd[752]: Connection from 192.168.10.155 port 53106 on 192.168.50.63 port 22</div><div>May 2 17:10:32 neodymium sshd[752]: debug1: Client protocol version 2.0; client software version PuTTY_KiTTY</div><div>May 2 17:10:32 neodymium sshd[752]: debug1: no match: PuTTY_KiTTY</div><div>May 2 17:10:32 neodymium sshd[752]: debug1: Enabling compatibility mode for protocol 2.0</div><div>May 2 17:10:32 neodymium sshd[752]: debug1: Local version string SSH-2.0-OpenSSH_6.6.1</div><div>May 2 17:10:32 neodymium sshd[752]: debug2: fd 3 setting O_NONBLOCK</div><div>May 2 17:10:32 neodymium sshd[752]: debug3: ssh_sandbox_init: preparing rlimit sandbox</div><div>May 2 17:10:32 neodymium sshd[752]: debug2: Network child is on pid 753</div><div>May 2 17:10:32 neodymium sshd[752]: debug3: preauth child monitor started</div><div>May 2 17:10:32 neodymium sshd[752]: debug1: SELinux support disabled [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug3: privsep user:group 74:74 [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug1: permanently_set_uid: 74/74 [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug1: list_hostkey_types: ssh-rsa,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug3: mm_request_send entering: type 42 [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug3: mm_request_receive_expect entering: type 43 [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug3: mm_request_receive entering [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug3: mm_request_receive entering</div><div>May 2 17:10:32 neodymium sshd[752]: debug3: monitor_read: checking request 42</div><div>May 2 17:10:32 neodymium sshd[752]: debug3: mm_request_send entering: type 43</div><div>May 2 17:10:32 neodymium sshd[752]: debug1: SSH2_MSG_KEXINIT sent [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug1: SSH2_MSG_KEXINIT received [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug2: kex_parse_kexinit: gss-gex-sha1-toWM5Slw5Ew8Mqkay+al2g==,gss-group1-sha1-toWM5Slw5Ew8Mqkay+al2g==,gss-group14-sha1-toWM5Slw5Ew8Mqkay+al2g==,<a href="mailto:curve25519-sha256@libssh.org">curve25519-sha256@libssh.org</a>,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug2: kex_parse_kexinit: ssh-rsa,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,<a href="mailto:aes128-gcm@openssh.com">aes128-gcm@openssh.com</a>,<a href="mailto:aes256-gcm@openssh.com">aes256-gcm@openssh.com</a>,<a href="mailto:chacha20-poly1305@openssh.com">chacha20-poly1305@openssh.com</a>,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,<a href="mailto:rijndael-cbc@lysator.liu.se">rijndael-cbc@lysator.liu.se</a> [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,<a href="mailto:aes128-gcm@openssh.com">aes128-gcm@openssh.com</a>,<a href="mailto:aes256-gcm@openssh.com">aes256-gcm@openssh.com</a>,<a href="mailto:chacha20-poly1305@openssh.com">chacha20-poly1305@openssh.com</a>,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,<a href="mailto:rijndael-cbc@lysator.liu.se">rijndael-cbc@lysator.liu.se</a> [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug2: kex_parse_kexinit: <a href="mailto:hmac-md5-etm@openssh.com">hmac-md5-etm@openssh.com</a>,<a href="mailto:hmac-sha1-etm@openssh.com">hmac-sha1-etm@openssh.com</a>,<a href="mailto:umac-64-etm@openssh.com">umac-64-etm@openssh.com</a>,<a href="mailto:umac-128-etm@openssh.com">umac-128-etm@openssh.com</a>,<a href="mailto:hmac-sha2-256-etm@openssh.com">hmac-sha2-256-etm@openssh.com</a>,<a href="mailto:hmac-sha2-512-etm@openssh.com">hmac-sha2-512-etm@openssh.com</a>,<a href="mailto:hmac-ripemd160-etm@openssh.com">hmac-ripemd160-etm@openssh.com</a>,<a href="mailto:hmac-sha1-96-etm@openssh.com">hmac-sha1-96-etm@openssh.com</a>,<a href="mailto:hmac-md5-96-etm@openssh.com">hmac-md5-96-etm@openssh.com</a>,hmac-md5,hmac-sha1,<a href="mailto:umac-64@openssh.com">umac-64@openssh.com</a>,<a href="mailto:umac-128@openssh.com">umac-128@openssh.com</a>,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,<a href="mailto:hmac-ripemd160@openssh.com">hmac-ripemd160@openssh.com</a>,hmac-sha1-96,hmac-md5-96 [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug2: kex_parse_kexinit: <a href="mailto:hmac-md5-etm@openssh.com">hmac-md5-etm@openssh.com</a>,<a href="mailto:hmac-sha1-etm@openssh.com">hmac-sha1-etm@openssh.com</a>,<a href="mailto:umac-64-etm@openssh.com">umac-64-etm@openssh.com</a>,<a href="mailto:umac-128-etm@openssh.com">umac-128-etm@openssh.com</a>,<a href="mailto:hmac-sha2-256-etm@openssh.com">hmac-sha2-256-etm@openssh.com</a>,<a href="mailto:hmac-sha2-512-etm@openssh.com">hmac-sha2-512-etm@openssh.com</a>,<a href="mailto:hmac-ripemd160-etm@openssh.com">hmac-ripemd160-etm@openssh.com</a>,<a href="mailto:hmac-sha1-96-etm@openssh.com">hmac-sha1-96-etm@openssh.com</a>,<a href="mailto:hmac-md5-96-etm@openssh.com">hmac-md5-96-etm@openssh.com</a>,hmac-md5,hmac-sha1,<a href="mailto:umac-64@openssh.com">umac-64@openssh.com</a>,<a href="mailto:umac-128@openssh.com">umac-128@openssh.com</a>,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,<a href="mailto:hmac-ripemd160@openssh.com">hmac-ripemd160@openssh.com</a>,hmac-sha1-96,hmac-md5-96 [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug2: kex_parse_kexinit: none,<a href="mailto:zlib@openssh.com">zlib@openssh.com</a> [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug2: kex_parse_kexinit: none,<a href="mailto:zlib@openssh.com">zlib@openssh.com</a> [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug2: kex_parse_kexinit: [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug2: kex_parse_kexinit: [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug2: kex_parse_kexinit: first_kex_follows 0 [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug2: kex_parse_kexinit: reserved 0 [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug2: kex_parse_kexinit: <a href="mailto:curve25519-sha256@libssh.org">curve25519-sha256@libssh.org</a>,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,rsa2048-sha256,rsa1024-sha1,diffie-hellman-group1-sha1 [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug2: kex_parse_kexinit: ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-rsa,ssh-dss [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug2: kex_parse_kexinit: aes256-ctr,aes256-cbc,<a href="mailto:rijndael-cbc@lysator.liu.se">rijndael-cbc@lysator.liu.se</a>,aes192-ctr,aes192-cbc,aes128-ctr,aes128-cbc,<a href="mailto:chacha20-poly1305@openssh.com">chacha20-poly1305@openssh.com</a>,blowfish-ctr,blowfish-cbc,3des-ctr,3des-cbc,arcfour256,arcfour128 [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug2: kex_parse_kexinit: aes256-ctr,aes256-cbc,<a href="mailto:rijndael-cbc@lysator.liu.se">rijndael-cbc@lysator.liu.se</a>,aes192-ctr,aes192-cbc,aes128-ctr,aes128-cbc,<a href="mailto:chacha20-poly1305@openssh.com">chacha20-poly1305@openssh.com</a>,blowfish-ctr,blowfish-cbc,3des-ctr,3des-cbc,arcfour256,arcfour128 [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug2: kex_parse_kexinit: hmac-sha2-256,hmac-sha1,hmac-sha1-96,hmac-md5,<a href="mailto:hmac-sha2-256-etm@openssh.com">hmac-sha2-256-etm@openssh.com</a>,<a href="mailto:hmac-sha1-etm@openssh.com">hmac-sha1-etm@openssh.com</a>,<a href="mailto:hmac-sha1-96-etm@openssh.com">hmac-sha1-96-etm@openssh.com</a>,<a href="mailto:hmac-md5-etm@openssh.com">hmac-md5-etm@openssh.com</a> [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug2: kex_parse_kexinit: hmac-sha2-256,hmac-sha1,hmac-sha1-96,hmac-md5,<a href="mailto:hmac-sha2-256-etm@openssh.com">hmac-sha2-256-etm@openssh.com</a>,<a href="mailto:hmac-sha1-etm@openssh.com">hmac-sha1-etm@openssh.com</a>,<a href="mailto:hmac-sha1-96-etm@openssh.com">hmac-sha1-96-etm@openssh.com</a>,<a href="mailto:hmac-md5-etm@openssh.com">hmac-md5-etm@openssh.com</a> [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug2: kex_parse_kexinit: none,zlib [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug2: kex_parse_kexinit: none,zlib [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug2: kex_parse_kexinit: [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug2: kex_parse_kexinit: [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug2: kex_parse_kexinit: first_kex_follows 0 [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug2: kex_parse_kexinit: reserved 0 [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug2: mac_setup: setup hmac-sha2-256 [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug1: kex: client->server aes256-ctr hmac-sha2-256 none [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug2: mac_setup: setup hmac-sha2-256 [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug1: kex: server->client aes256-ctr hmac-sha2-256 none [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug1: kex: <a href="mailto:curve25519-sha256@libssh.org">curve25519-sha256@libssh.org</a> need=32 dh_need=32 [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug3: mm_request_send entering: type 120 [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug3: mm_request_receive_expect entering: type 121 [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug3: mm_request_receive entering [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug3: mm_request_receive entering</div><div>May 2 17:10:32 neodymium sshd[752]: debug3: monitor_read: checking request 120</div><div>May 2 17:10:32 neodymium sshd[752]: debug3: mm_request_send entering: type 121</div><div>May 2 17:10:32 neodymium sshd[752]: debug1: kex: <a href="mailto:curve25519-sha256@libssh.org">curve25519-sha256@libssh.org</a> need=32 dh_need=32 [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug3: mm_request_send entering: type 120 [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug3: mm_request_receive_expect entering: type 121 [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug3: mm_request_receive entering [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug3: mm_request_receive entering</div><div>May 2 17:10:32 neodymium sshd[752]: debug3: monitor_read: checking request 120</div><div>May 2 17:10:32 neodymium sshd[752]: debug3: mm_request_send entering: type 121</div><div>May 2 17:10:32 neodymium sshd[752]: debug1: expecting SSH2_MSG_KEX_ECDH_INIT [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug3: mm_key_sign entering [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug3: mm_request_send entering: type 6 [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug3: mm_key_sign: waiting for MONITOR_ANS_SIGN [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug3: mm_request_receive_expect entering: type 7 [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug3: mm_request_receive entering [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug3: mm_request_receive entering</div><div>May 2 17:10:32 neodymium sshd[752]: debug3: monitor_read: checking request 6</div><div>May 2 17:10:32 neodymium sshd[752]: debug3: mm_answer_sign</div><div>May 2 17:10:32 neodymium sshd[752]: debug3: mm_answer_sign: signature 0x7f7ea34ed250(83)</div><div>May 2 17:10:32 neodymium sshd[752]: debug3: mm_request_send entering: type 7</div><div>May 2 17:10:32 neodymium sshd[752]: debug2: monitor_read: 6 used once, disabling now</div><div>May 2 17:10:32 neodymium sshd[752]: debug2: kex_derive_keys [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug2: set_newkeys: mode 1 [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug1: SSH2_MSG_NEWKEYS sent [preauth]</div><div>May 2 17:10:32 neodymium sshd[752]: debug1: expecting SSH2_MSG_NEWKEYS [preauth]</div><div>May 2 17:10:33 neodymium sshd[752]: debug2: set_newkeys: mode 0 [preauth]</div><div>May 2 17:10:33 neodymium sshd[752]: debug1: SSH2_MSG_NEWKEYS received [preauth]</div><div>May 2 17:10:33 neodymium sshd[752]: debug1: KEX done [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug1: userauth-request for user <a href="mailto:adm.tiemen@clients.rdmedia.com">adm.tiemen@clients.rdmedia.com</a> service ssh-connection method none [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug1: attempt 0 failures 0 [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_getpwnamallow entering [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_request_send entering: type 8 [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_getpwnamallow: waiting for MONITOR_ANS_PWNAM [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_request_receive_expect entering: type 9 [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_request_receive entering [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_request_receive entering</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: monitor_read: checking request 8</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_answer_pwnamallow</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: Trying to reverse map address 192.168.10.155.</div><div>May 2 17:10:42 neodymium sshd[752]: debug2: parse_server_config: config reprocess config len 922</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_answer_pwnamallow: sending MONITOR_ANS_PWNAM: 1</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_request_send entering: type 9</div><div>May 2 17:10:42 neodymium sshd[752]: debug2: monitor_read: 8 used once, disabling now</div><div>May 2 17:10:42 neodymium sshd[752]: debug2: input_userauth_request: setting up authctxt for <a href="mailto:adm.tiemen@clients.rdmedia.com">adm.tiemen@clients.rdmedia.com</a> [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_start_pam entering [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_request_send entering: type 100 [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_inform_authserv entering [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_request_send entering: type 4 [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_inform_authrole entering [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_request_send entering: type 80 [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug2: input_userauth_request: try method none [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: userauth_finish: failure partial=0 next methods="publickey,gssapi-keyex,gssapi-with-mic,password,keyboard-interactive" [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_request_receive entering</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: monitor_read: checking request 100</div><div>May 2 17:10:42 neodymium sshd[752]: debug1: PAM: initializing for "<a href="mailto:adm.tiemen@clients.rdmedia.com">adm.tiemen@clients.rdmedia.com</a>"</div><div>May 2 17:10:42 neodymium sshd[752]: debug1: PAM: setting PAM_RHOST to "192.168.10.155"</div><div>May 2 17:10:42 neodymium sshd[752]: debug1: PAM: setting PAM_TTY to "ssh"</div><div>May 2 17:10:42 neodymium sshd[752]: debug2: monitor_read: 100 used once, disabling now</div><div>May 2 17:10:42 neodymium sshd[752]: debug1: userauth-request for user <a href="mailto:adm.tiemen@clients.rdmedia.com">adm.tiemen@clients.rdmedia.com</a> service ssh-connection method gssapi-with-mic [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug1: attempt 1 failures 0 [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug2: input_userauth_request: try method gssapi-with-mic [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_request_send entering: type 42 [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_request_receive_expect entering: type 43 [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_request_receive entering [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_request_receive entering</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: monitor_read: checking request 4</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_answer_authserv: service=ssh-connection, style=</div><div>May 2 17:10:42 neodymium sshd[752]: debug2: monitor_read: 4 used once, disabling now</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_request_receive entering</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: monitor_read: checking request 80</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_answer_authrole: role=</div><div>May 2 17:10:42 neodymium sshd[752]: debug2: monitor_read: 80 used once, disabling now</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_request_receive entering</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: monitor_read: checking request 42</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_request_send entering: type 43</div><div>May 2 17:10:42 neodymium sshd[752]: Postponed gssapi-with-mic for <a href="mailto:adm.tiemen@clients.rdmedia.com">adm.tiemen@clients.rdmedia.com</a> from 192.168.10.155 port 53106 ssh2 [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug1: userauth-request for user <a href="mailto:adm.tiemen@clients.rdmedia.com">adm.tiemen@clients.rdmedia.com</a> service ssh-connection method keyboard-interactive [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug1: attempt 2 failures 0 [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug2: input_userauth_request: try method keyboard-interactive [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug1: keyboard-interactive devs [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug1: auth2_challenge: user=<a href="mailto:adm.tiemen@clients.rdmedia.com">adm.tiemen@clients.rdmedia.com</a> devs= [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug1: kbdint_alloc: devices 'pam' [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug2: auth2_challenge_start: devices pam [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug2: kbdint_next_device: devices <empty> [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug1: auth2_challenge_start: trying authentication method 'pam' [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_sshpam_init_ctx [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_request_send entering: type 104 [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_sshpam_init_ctx: waiting for MONITOR_ANS_PAM_INIT_CTX [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_request_receive_expect entering: type 105 [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_request_receive entering [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_request_receive entering</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: monitor_read: checking request 104</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_answer_pam_init_ctx</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: PAM: sshpam_init_ctx entering</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_request_send entering: type 105</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_sshpam_query [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_request_send entering: type 106 [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_sshpam_query: waiting for MONITOR_ANS_PAM_QUERY [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_request_receive_expect entering: type 107 [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_request_receive entering [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_request_receive entering</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: monitor_read: checking request 106</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_answer_pam_query</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: PAM: sshpam_query entering</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: ssh_msg_recv entering</div><div>May 2 17:10:42 neodymium sshd[766]: debug3: PAM: sshpam_thread_conv entering, 1 messages</div><div>May 2 17:10:42 neodymium sshd[766]: debug3: ssh_msg_send: type 1</div><div>May 2 17:10:42 neodymium sshd[766]: debug3: ssh_msg_recv entering</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_request_send entering: type 107</div><div>May 2 17:10:42 neodymium sshd[752]: debug3: mm_sshpam_query: pam_query returned 0 [preauth]</div><div>May 2 17:10:42 neodymium sshd[752]: Postponed keyboard-interactive for <a href="mailto:adm.tiemen@clients.rdmedia.com">adm.tiemen@clients.rdmedia.com</a> from 192.168.10.155 port 53106 ssh2 [preauth]</div></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br clear="all"><div><br></div>-- <br><div class="gmail_signature"><div dir="ltr">Tiemen Ruiten<br>Systems Engineer<br>R&D Media<br></div></div> </div></div>