<div dir="ltr"><div class="gmail_quote"><div dir="ltr"><div>Hi Team,</div><div><br></div><div>My other node's are working fine. It's not asking any password. Please let me know to fix this issue. thanks to reach out me </div><div>Here it is output from working node:---</div><div><br></div><div><div>debug1: Authentications that can continue: publickey,gssapi-with-mic,<wbr>password</div><div>debug1: Next authentication method: gssapi-with-mic</div><div>debug1: Delegating credentials</div><div>debug1: Delegating credentials</div><div>debug1: Authentication succeeded (gssapi-with-mic).</div><div>debug1: channel 0: new [client-session]</div><div>debug1: Entering interactive session.</div><div>Last login: Wed Jan 4 07:31:27 2017 from 10.229.67.109</div></div><div><br></div><div>###########################</div><div><br></div><div>logs from failure node while do ssh </div><div><br></div><div><div>ebug1: Authentications that can continue: publickey,gssapi-with-mic,<wbr>password</div><div>debug1: Next authentication method: gssapi-with-mic</div><div>debug1: Unspecified GSS failure. Minor code may provide more information</div><span class=""><div>KDC has no support for encryption type</div><div><br></div></span><div>debug1: Unspecified GSS failure. Minor code may provide more information</div><span class=""><div>KDC has no support for encryption type</div><div><br></div></span><div>debug1: Unspecified GSS failure. Minor code may provide more information</div><div><br></div><div><br></div><div>debug1: Authentications that can continue: publickey,gssapi-with-mic,<wbr>password</div><div>debug1: Next authentication method: publickey</div><div>debug1: Offering public key: /uhome/tsinha/.ssh/id_rsa</div><div>debug1: Authentications that can continue: publickey,gssapi-with-mic,<wbr>password</div><div>debug1: Trying private key: /uhome/tsinha/.ssh/id_dsa</div><div>debug1: Trying private key: /uhome/tsinha/.ssh/id_ecdsa</div><div>debug1: Next authentication method: password</div></div><div><br></div><div><br></div><div>@@@@@@@@@@@@@@@</div><div><br></div><div><br></div><div>Thanks,</div><div><br></div><div>Tarak</div><div><br></div></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Jan 4, 2017 at 8:35 PM, tarak sinha <span dir="ltr"><<a href="mailto:taraksinha09@gmail.com" target="_blank">taraksinha09@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">It showing below encryption type..<div><br></div><div>Etype (skey, tkt): AES-256 CTS mode with 96-bit SHA-1 HMAC, AES-256 CTS mode with 96-bit SHA-1 HMAC<br></div></div><div class="gmail_extra"><div><div class="m_2163447478390647215h5"><br><div class="gmail_quote">On Wed, Jan 4, 2017 at 8:28 PM, Sumit Bose <span dir="ltr"><<a href="mailto:sbose@redhat.com" target="_blank">sbose@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span>On Wed, Jan 04, 2017 at 08:01:54PM +0530, tarak sinha wrote:<br>
> Hi Sumit.<br>
><br>
> I am getting this error on host .<br>
<br>
</span>In which log file do you see the message? Can you send the full message<br>
and a bit of context from the log file?<br>
<br>
What encryption types does 'klist -k -e' show for the host key on the<br>
host? What encryption types does 'klist -e' show on the client after<br>
calling ssh?<br>
<br>
bye,<br>
Sumit<br>
<div><div class="m_2163447478390647215m_-4262856516812818498h5"><br>
><br>
> Thanks<br>
><br>
> On Wed, Jan 4, 2017 at 4:28 PM, Sumit Bose <<a href="mailto:sbose@redhat.com" target="_blank">sbose@redhat.com</a>> wrote:<br>
><br>
> > On Mon, Jan 02, 2017 at 11:03:36PM +0530, tarak sinha wrote:<br>
> > > Hi Team,<br>
> > ><br>
> > > I am getting below error while trying to ssh my host without password.<br>
> > ><br>
> > > Unspecified GSS failure. Minor code may provide more information KDC has<br>
> > no<br>
> > > support for encryption type<br>
> ><br>
> > Where do you see this error, on the client where you call ssh or in the<br>
> > logs on the host you try to log in to? Are you using IPA user or do you<br>
> > use trust and AD users from a trusted domain?<br>
> ><br>
> > Do you see any related messages in the KDC logs?<br>
> ><br>
> > bye,<br>
> > Sumit<br>
> ><br>
> > ><br>
> > > Thanks in advance<br>
> > ><br>
> > > *Thanks,*<br>
> > ><br>
> > > *Tarak Nath Sinha*<br>
> ><br>
> > > --<br>
> > > Manage your subscription for the Freeipa-users mailing list:<br>
> > > <a href="https://www.redhat.com/mailman/listinfo/freeipa-users" rel="noreferrer" target="_blank">https://www.redhat.com/mailman<wbr>/listinfo/freeipa-users</a><br>
> > > Go to <a href="http://freeipa.org" rel="noreferrer" target="_blank">http://freeipa.org</a> for more info on the project<br>
> ><br>
> > --<br>
> > Manage your subscription for the Freeipa-users mailing list:<br>
> > <a href="https://www.redhat.com/mailman/listinfo/freeipa-users" rel="noreferrer" target="_blank">https://www.redhat.com/mailman<wbr>/listinfo/freeipa-users</a><br>
> > Go to <a href="http://freeipa.org" rel="noreferrer" target="_blank">http://freeipa.org</a> for more info on the project<br>
> ><br>
><br>
><br>
><br>
> --<br>
><br>
</div></div>> *Thanks,*<br>
><br>
> *Tarak Nath Sinha*<br>
><br>
> *Mobile: **+91 8197522750*<br>
</blockquote></div><br><br clear="all"><div><br></div></div></div><span>-- <br><div class="m_2163447478390647215m_-4262856516812818498gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><p><b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Thanks,</span></b></p>
<p><b><span style="font-size:11.0pt;font-family:"Andalus","serif";color:#1f497d">Tarak Nath Sinha</span></b></p><p><b><span style="font-family:"Aparajita","sans-serif";color:#1f497d;border:none windowtext 1.0pt;padding:0in">Mobile: </span></b><b><span style="font-family:"Aparajita","sans-serif";color:#1f497d">+91 8197522750</span></b></p></div></div>
</span></div>
</blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="m_2163447478390647215gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><p><b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Thanks,</span></b></p>
<p><b><span style="font-size:11.0pt;font-family:"Andalus","serif";color:#1f497d">Tarak Nath Sinha</span></b></p><p><b><span style="font-family:"Aparajita","sans-serif";color:#1f497d;border:none windowtext 1.0pt;padding:0in">Mobile: </span></b><b><span style="font-family:"Aparajita","sans-serif";color:#1f497d">+91 8197522750</span></b></p></div></div>
</div>
</div></div></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><p><b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Thanks,</span></b></p>
<p><b><span style="font-size:11.0pt;font-family:"Andalus","serif";color:#1f497d">Tarak Nath Sinha</span></b></p><p><b><span style="font-family:"Aparajita","sans-serif";color:#1f497d;border:none windowtext 1.0pt;padding:0in">Mobile: </span></b><b><span style="font-family:"Aparajita","sans-serif";color:#1f497d">+91 8197522750</span></b></p></div></div>
</div>