On 23 Apr 2013, at 11:19, Rhys Smith wrote:
> On 23 Apr 2013, at 10:56, Dave Lewney <[log in to unmask]> wrote:
>
>> Hi Jose,
>>
>> Thanks - that worked. Not quite sure why though - GSSAPIStrictAcceptorCheck was not set and the the default value is "yes".
>
> Yup - GSSAPIStrictAcceptorCheck is a security check, and therefore is on by default.
>
> Turning it off means that GSS names aren't checked quite as well - so as a short term fix to let you play with things it's fine; but the longer term solution is to get the hostname sorted so that the check succeeds rather than fails.
>
> Best,
> Rhys.
> --
> Dr Rhys Smith
> Identity, Access, and Middleware Specialist
> Cardiff University & Janet - the UK's research and education network
>
> email: [log in to unmask] / [log in to unmask]
> GPG: 0xDE2F024C
>
Further testing with GSSAPIStrictAcceptorCheck implicitly set to "yes" - it works if I ssh to the short form of hostname rather than the fqdn.
Dave
---
Dave Lewney
IT Services, University of Sussex, Brighton BN1 9QT
|