SSO issue on freeipa client

[tarak sinha]

Hi Team,



I am not able to ssh my ipaclient host with SSO, it was working few days
back.

Here it is SSH debug:- Any suggestion will be much appreciated.


debug1: Authentications that can continue:
publickey,gssapi-keyex,gssapi-with-mic,password
debug3: start over, passed a different list
publickey,gssapi-keyex,gssapi-with-mic,password
debug3: preferred gssapi-with-mic,publickey,keyboard-interactive,password
debug3: authmethod_lookup gssapi-with-mic
debug3: remaining preferred: publickey,keyboard-interactive,password
debug3: authmethod_is_enabled gssapi-with-mic
debug1: Next authentication method: gssapi-with-mic
debug3: Trying to reverse map address 10.21.113.217.
debug2: we sent a gssapi-with-mic packet, wait for reply
debug1: Delegating credentials
debug1: Delegating credentials
debug1: Unspecified GSS failure.  Minor code may provide more information
Generic error (see e-text)

debug1: Authentications that can continue:
publickey,gssapi-keyex,gssapi-with-mic,password
debug2: we sent a gssapi-with-mic packet, wait for reply
debug1: Authentications that can continue:
publickey,gssapi-keyex,gssapi-with-mic,password
debug2: we sent a gssapi-with-mic packet, wait for reply
debug1: Authentications that can continue:
publickey,gssapi-keyex,gssapi-with-mic,password
debug2: we did not send a packet, disable method
debug3: authmethod_lookup publickey
debug3: remaining preferred: keyboard-interactive,password
debug3: authmethod_is_enabled publickey
debug1: Next authentication method: publickey
debug1: Trying private key: /uhome/tsinha/.ssh/id_rsa
debug3: no such identity: /uhome/tsinha/.ssh/id_rsa
debug1: Trying private key: /uhome/tsinha/.ssh/id_dsa
debug3: no such identity: /uhome/tsinha/.ssh/id_dsa
debug2: we did not send a packet, disable method
debug3: authmethod_lookup password
debug3: remaining preferred: ,password
debug3: authmethod_is_enabled password
debug1: Next authentication method: password

[John Hearns]

Tarak, I have been doing work in debugging ssh using sssd this week.

On the server side run this and look at the output also
/usr/sbin/ssshd -ddd

The problem I am having is with a Kerberos ticket if anyone can help!




On Tue, 24 Jul 2018 at 11:33, tarak sinha via FreeIPA-users <
freeipa-users(a)lists.fedorahosted.org&gt; wrote:

>  Hi Team,
>
>
>
>  I am not able to ssh my ipaclient host with SSO, it was working few days
>  back.
>
>  Here it is SSH debug:- Any suggestion will be much appreciated.
>
>
>  debug1: Authentications that can continue:
>  publickey,gssapi-keyex,gssapi-with-mic,password
>  debug3: start over, passed a different list
>  publickey,gssapi-keyex,gssapi-with-mic,password
>  debug3: preferred gssapi-with-mic,publickey,keyboard-interactive,password
>  debug3: authmethod_lookup gssapi-with-mic
>  debug3: remaining preferred: publickey,keyboard-interactive,password
>  debug3: authmethod_is_enabled gssapi-with-mic
>  debug1: Next authentication method: gssapi-with-mic
>  debug3: Trying to reverse map address 10.21.113.217.
>  debug2: we sent a gssapi-with-mic packet, wait for reply
>  debug1: Delegating credentials
>  debug1: Delegating credentials
>  debug1: Unspecified GSS failure.  Minor code may provide more information
>  Generic error (see e-text)
>
>  debug1: Authentications that can continue:
>  publickey,gssapi-keyex,gssapi-with-mic,password
>  debug2: we sent a gssapi-with-mic packet, wait for reply
>  debug1: Authentications that can continue:
>  publickey,gssapi-keyex,gssapi-with-mic,password
>  debug2: we sent a gssapi-with-mic packet, wait for reply
>  debug1: Authentications that can continue:
>  publickey,gssapi-keyex,gssapi-with-mic,password
>  debug2: we did not send a packet, disable method
>  debug3: authmethod_lookup publickey
>  debug3: remaining preferred: keyboard-interactive,password
>  debug3: authmethod_is_enabled publickey
>  debug1: Next authentication method: publickey
>  debug1: Trying private key: /uhome/tsinha/.ssh/id_rsa
>  debug3: no such identity: /uhome/tsinha/.ssh/id_rsa
>  debug1: Trying private key: /uhome/tsinha/.ssh/id_dsa
>  debug3: no such identity: /uhome/tsinha/.ssh/id_dsa
>  debug2: we did not send a packet, disable method
>  debug3: authmethod_lookup password
>  debug3: remaining preferred: ,password
>  debug3: authmethod_is_enabled password
>  debug1: Next authentication method: password
>
>
>  _______________________________________________
>  FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
>  To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
>  Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
>
> https://lists.fedoraproject.org/archives/list/[e-mail]...
>