[Freeipa-users] Fwd: Unspecified GSS failure. Minor code may provide more information KDC has no support for encryption type

[tarak sinha]

Hi Team,

My other node's are working fine. It's not asking any password. Please let
me know to fix this issue. thanks to reach out me
Here it is output from working node:---

debug1: Authentications that can continue: publickey,gssapi-with-mic,
password
debug1: Next authentication method: gssapi-with-mic
debug1: Delegating credentials
debug1: Delegating credentials
debug1: Authentication succeeded (gssapi-with-mic).
debug1: channel 0: new [client-session]
debug1: Entering interactive session.
Last login: Wed Jan  4 07:31:27 2017 from 10.229.67.109

###########################

logs from failure node while do ssh

ebug1: Authentications that can continue: publickey,gssapi-with-mic,password
debug1: Next authentication method: gssapi-with-mic
debug1: Unspecified GSS failure.  Minor code may provide more information
KDC has no support for encryption type

debug1: Unspecified GSS failure.  Minor code may provide more information
KDC has no support for encryption type

debug1: Unspecified GSS failure.  Minor code may provide more information


debug1: Authentications that can continue: publickey,gssapi-with-mic,
password
debug1: Next authentication method: publickey
debug1: Offering public key: /uhome/tsinha/.ssh/id_rsa
debug1: Authentications that can continue: publickey,gssapi-with-mic,
password
debug1: Trying private key: /uhome/tsinha/.ssh/id_dsa
debug1: Trying private key: /uhome/tsinha/.ssh/id_ecdsa
debug1: Next authentication method: password


@@@@@@@@@@@@@@@


Thanks,

Tarak


On Wed, Jan 4, 2017 at 8:35 PM, tarak sinha <taraksinha09 at gmail.com> wrote:

> It showing below encryption type..
>
> Etype (skey, tkt): AES-256 CTS mode with 96-bit SHA-1 HMAC, AES-256 CTS
> mode with 96-bit SHA-1 HMAC
>
> On Wed, Jan 4, 2017 at 8:28 PM, Sumit Bose <sbose at redhat.com> wrote:
>
>> On Wed, Jan 04, 2017 at 08:01:54PM +0530, tarak sinha wrote:
>> > Hi Sumit.
>> >
>> > I am getting this error on host .
>>
>> In which log file do you see the message? Can you send the full message
>> and a bit of context from the log file?
>>
>> What encryption types does 'klist -k -e' show for the host key on the
>> host?  What encryption types does 'klist -e' show on the client after
>> calling ssh?
>>
>> bye,
>> Sumit
>>
>> >
>> > Thanks
>> >
>> > On Wed, Jan 4, 2017 at 4:28 PM, Sumit Bose <sbose at redhat.com> wrote:
>> >
>> > > On Mon, Jan 02, 2017 at 11:03:36PM +0530, tarak sinha wrote:
>> > > > Hi Team,
>> > > >
>> > > > I am getting below error while trying to ssh my host without
>> password.
>> > > >
>> > > > Unspecified GSS failure. Minor code may provide more information
>> KDC has
>> > > no
>> > > > support for encryption type
>> > >
>> > > Where do you see this error, on the client where you call ssh or in
>> the
>> > > logs on the host you try to log in to? Are you using IPA user or do
>> you
>> > > use trust and AD users from a trusted domain?
>> > >
>> > > Do you see any related messages in the KDC logs?
>> > >
>> > > bye,
>> > > Sumit
>> > >
>> > > >
>> > > > Thanks in advance
>> > > >
>> > > > *Thanks,*
>> > > >
>> > > > *Tarak Nath Sinha*
>> > >
>> > > > --
>> > > > Manage your subscription for the Freeipa-users mailing list:
>> > > > https://www.redhat.com/mailman/listinfo/freeipa-users
>> > > > Go to http://freeipa.org for more info on the project
>> > >
>> > > --
>> > > Manage your subscription for the Freeipa-users mailing list:
>> > > https://www.redhat.com/mailman/listinfo/freeipa-users
>> > > Go to http://freeipa.org for more info on the project
>> > >
>> >
>> >
>> >
>> > --
>> >
>> > *Thanks,*
>> >
>> > *Tarak Nath Sinha*
>> >
>> > *Mobile: **+91 8197522750*
>>
>
>
>
> --
>
> *Thanks,*
>
> *Tarak Nath Sinha*
>
> *Mobile: **+91 8197522750*
>



-- 

*Thanks,*

*Tarak Nath Sinha*

*Mobile: **+91 8197522750*



-- 

*Thanks,*

*Tarak Nath Sinha*

*Mobile: **+91 8197522750*
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20170104/07e863bc/attachment.htm>