Subject: bin/30750: ssh gives bogus complaint when gssapi authentication fails
To: None <gnats-admin@netbsd.org, netbsd-bugs@netbsd.org>
From: Mark Davies <mark@mcs.vuw.ac.nz>
List: netbsd-bugs
Date: 07/15/2005 00:30:00
>Number: 30750
>Category: bin
>Synopsis: ssh gives bogus complaint when gssapi authentication fails
>Confidential: no
>Severity: non-critical
>Priority: medium
>Responsible: bin-bug-people
>State: open
>Class: sw-bug
>Submitter-Id: net
>Arrival-Date: Fri Jul 15 00:30:00 +0000 2005
>Originator: Mark Davies
>Release: NetBSD 3.99.7
>Organization:
Dept. of Comp. Sci., Victoria Uni. of Wellington, New Zealand.
>Environment:
System: NetBSD city-art.mcs.vuw.ac.nz 3.99.7 NetBSD 3.99.7 (MCS_WORKSTATION) #0: Fri Jul 1 13:19:21 NZST 2005 mark@turakirae.mcs.vuw.ac.nz:/mnt/SAVE/buid.obj/src/work/src/sys/arch/i386/compile/MCS_WORKSTATION i386
Architecture: i386
Machine: i386
>Description:
If you are in a kerberos environment and enable
"GSSAPIAuthentication yes" in /etc/ssh/ssh_config but for some
reason that authentication fails when using ssh (eg no credential
cache or tickets have expired) then ssh prints the bogus warning:
/etc/ssh/ssh_config line 27: Unsupported option "GSSAPIAuthentication"
before trying other configured authentication mechanisms.
>How-To-Repeat:
add "GSSAPIAuthentication yes" to /etc/ssh/ssh_config
run "kdestroy" to remove any current tickets.
ssh somehere and note the bogus warning message printed:
city-art% kdestroy
city-art% ssh circa
/etc/ssh/ssh_config line 27: Unsupported option "GSSAPIAuthentication"
/etc/ssh/ssh_config line 27: Unsupported option "GSSAPIAuthentication"
Enter passphrase for key '/u/staff/mark/.ssh/id_rsa':
>Fix:
Don't know.
>Unformatted: