gssapi not enabled

[Simon Wilkinson]

On 4 Apr 2009, at 00:29, Ted Creedon wrote:

> sshd_conf  aaadn ssh_conf
>
> # GSSAPI options
> GSSAPIAuthentication yes
> GSSAPICleanupCredentials yes
>
>  ssh -vvvv -o PreferredAuthentications=gssapi-with-mic localhost

Do you have a key in your KDC for host/localhost (I suspect not, and  
you don't want one either)

Kerberos has to be done against real, addresses, which resolve to  
hostnames for which entries have been created in your KDC, and  
populated in your servers keytab.

Cheers,

Simon.