Problems with Krb5/GSSAPI patches in FBSD 4.3

[Peter Losher]

Hi,

I am trying to impliment OpenSSH v2.9p1 with the Krb5/GSSAPI patches at:

http://www.sxw.org.uk/computing/patches/openssh-2.9p1-gssapi.patch

On a FreeBSD 4.3-STABLE system (with both the integrated Heimdal libs and
the MIT Krb5 package from ports intstalled).  I patched the src tree,
reconfigured, recompiled, installed, and it works - except for Krb5
passwords or Krb5 tickets.  And I really can't tell if the patches are even
working or if it contacts the KDC (no error message shows up on console or
in /var/log/messages)  It just rejects my Krb5 password.

Per the patch, I do have this in my sshd_config:

GssapiAuthentication yes
GssapiKeyExchange yes

Does anyone have any ideas of how I can debug this?

Thanks! - Peter Losher
-- 
Peter.Losher at nominum.com - [ Systems Admin. | Nominum, Inc. ]