On Fri, 15 Feb 2019 at 09:14, Sumit Bose <sbose@redhat.com> wrote:

I assume you are using ssh (putty) to log in with SSO?

Yes, and also SecureCRT

For a start you can check on R by increasing the LogLevel in
/etc/ssh/sshd_config and restarting sshd if GSSAPI authentication is
tried at all?

I changed sshd_config to:

LogLevel DEBUG

Then I tried a login and looked at /var/log/secure which said:

sshd[14664]: debug1: Unspecified GSS failure. Minor code may provide more information\nNo key table entry found matching host/fiksudb@\n

I don't know what that "fiksudb" is but I guessed it most be some kind of a server.

A look in /etc/hosts revealed the problem.

I comment all out in /etc/hosts and that solved the problem.

So lesson learned: Increase LogLevel in sshd_config and look for GSS in /var/log/secure

Thank you very much for help Sumit!

best regards

Hans