Hi Dave,
Try to modify ssh server configuration /etc/ssh/sshd_config
If GSSAPIStrictAcceptorCheck is set to "no'' then the client may
authenticate against any service key stored in the machine's default
store (accept any GSSAPI name).
......
UsePriviligeSeparation no
GSSAPIAuthentication yes
GSSAPIKeyExchange yes
GSSAPIStrictAcceptorCheck no
.....
Save /etc/ssh/sshd_config after modifications
Restart ssh server
On Fri, Apr 19, 2013 at 11:00 AM, Dave Lewney <[log in to unmask]> wrote:
> SYNOPSIS
> Testing ssh gives prompt for password rather than sign in.
>
> Hi,
>
> Testing out the Moonshot with the Live DVD as per the instructions in the wiki (https://community.ja.net/groups/moonshot/wiki/getting-started-moonshot-using-live-dvd). The testing with the gss-client and gss-server went fine. However with testing ssh, instead of falling straight through to the "$" prompt, I'm given the usual ssh prompt:
>
> dml@moon-serv:~$ ssh [log in to unmask]
> [log in to unmask] password:
>
> Oh, and just to make sure ...
>
> dml@moon-serv:~$ hostname -f
> moon-serv.uscs.susx.ac.uk
>
> ... and ...
>
> dml@moon-serv:~$ id moonshot
> uid=1001(moonshot) gid=1001(moonshot) groups=1001(moonshot)
>
> Also, just to get my head around what's going on, the notes say
> 1. On the Live DVD, the local user "steve" that we just configured is set to release an attribute that SSH will use to map accounts to a local account called "moonshot".
>
> Where is this release of attributes done?
>
> Cheers,
> Dave
> ---
> Dave Lewney
> IT Services, University of Sussex, Brighton BN1 9QT
----
Jose Faisca
|