NetBSD Problem Report #22114

Received: (qmail 21957 invoked by uid 605); 10 Jul 2003 12:19:40 -0000
Message-Id: <20030710121817.B2C501E00@minor-variation.et.reziprozitaet.de>
Date: Thu, 10 Jul 2003 14:18:17 +0200 (CEST)
From: Klaus Klein <kleink@reziprozitaet.de>
Sender: gnats-bugs-owner@netbsd.org
To: gnats-bugs@gnats.netbsd.org
Subject: kerberos-2@ssh.com problems
X-Send-Pr-Version: 3.95

>Number:         22114
>Category:       bin
>Synopsis:       kerberos-2@ssh.com problems
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    bin-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Thu Jul 10 12:20:00 +0000 2003
>Closed-Date:    
>Last-Modified:  
>Originator:     Klaus Klein
>Release:        NetBSD 1.6U
>Organization:
Frobozz Magic Standards Company
>Environment:
n/a

>Description:
	In my environment I have a Kerberos 5 KDC, and I'm using
	SSH publickey authentication as well.

	When the TGT has expired, ssh is (obviously) unable to perform 
	kerberos-2@ssh.com authentication.  However, sshd does not support
	falling back to publickey authentication and logs

		fatal: monitor_read: unpermitted request 39,

	although it does offer an "authentications that can continue"
	packet after the failure.

	With a destroyed credential cache file, this is not a problem.

>How-To-Repeat:

>Fix:

>Release-Note:
>Audit-Trail:
>Unformatted:

Home	PR Database Search