output of ssh -v <a href="http://ipaserver.example.com">ipaserver.example.com</a>:<br><br>debug1: Authentications that can continue: publickey,gssapi-with-mic,password<br>debug1: Next authentication method: gssapi-with-mic<br>
debug1: Authentications that can continue: publickey,gssapi-with-mic,password<br>debug1: Authentications that can continue: publickey,gssapi-with-mic,password<br>debug1: Authentications that can continue: publickey,gssapi-with-mic,password<br>
debug1: Next authentication method: publickey<br>debug1: Trying private key: /root/.ssh/identity<br>debug1: Trying private key: /root/.ssh/id_rsa<br>debug1: Trying private key: /root/.ssh/id_dsa<br>debug1: Next authentication method: password<br>
admin@ipa.aragon.local's password: <br><br>It seems that authentications jump into gssapi-with-mic, but get nothing.<br><br><br><div class="gmail_quote">On Wed, Dec 9, 2009 at 9:25 PM, Simo Sorce <span dir="ltr"><<a href="mailto:ssorce@redhat.com">ssorce@redhat.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><div class="im">On Wed, 2009-12-09 at 15:16 +0800, Michael Kang wrote:<br>
> Does anyone know what's wrong?<br>
><br>
> On Tue, Dec 8, 2009 at 12:35 PM, Michael Kang <<a href="mailto:wxiluo@gmail.com">wxiluo@gmail.com</a>><br>
> wrote:<br>
> Dear all,<br>
><br>
> I had setup a FreeIPA server and a FreeIPA client. After using<br>
> the ktutil command to import the keytab, using the following<br>
> command on another machine to test the configuration. This<br>
> still need passwd.<br>
><br>
> IPA Server:<br>
> kinit admin<br>
> ipa-addservice host/<a href="http://ipaclient.example.com" target="_blank">ipaclient.example.com</a><br>
> ipa-getkeytab -s <a href="http://ipaserver.example.com" target="_blank">ipaserver.example.com</a> -p<br>
> host/<a href="http://ipaclient.example.com" target="_blank">ipaclient.example.com</a> -k /tmp/krb5.keytab<br>
> scp /tmp/krb5.keytab<br>
> root@ipaclient.example.com:/tmp/krb5.keytab<br>
><br>
> IPA client:<br>
> # ktutil<br>
> ktutil: read_kt /tmp/krb5.keytab<br>
> ktutil: write_kt /etc/krb5/krb5.keytab<br>
> ktutil: q<br>
> ssh <a href="mailto:admin@ipaserver.example.com">admin@ipaserver.example.com</a> (This don't need passwd.)<br>
><br>
><br>
> PC or Mac:<br>
> ssh <a href="mailto:admin@ipaclient.example.com">admin@ipaclient.example.com</a> (This still need passwd.)<br>
<br>
</div>So you did successfully kinit on the PC and on the Mac ?<br>
You can get more info on what is going on by using ssh -vvv<br>
<br>
Simo.<br>
<font color="#888888"><br>
<br>
--<br>
Simo Sorce * Red Hat, Inc * New York<br>
<br>
</font></blockquote></div><br><br clear="all"><br>-- <br>Michael Kang（康上明学）<br>There is a giant asleep within every man. When the giant awakens,miracles happen.<br><br>Personal blog: <a href="http://ufusion.org">http://ufusion.org</a> - United Fusion<br>