Hi Rhys, Stefan,

I am trying to setup another moonshot SP and hooking it into my existing infrastructure. The SP is SL6.6 and I have followed the instructions from the wiki. The httpd authentication seems to be working but for sshd the IdP refuses to accept my credentials. I have noticed that the radius debug output has some values missing compared to the working SP:

see below. I have tried to follow the instructions and compared the setup from the two versions. Any ideas what else am I missing?

Thanks,

Paul

Sent Access-Request Id 145 from 131.251.248.14:51514 to 131.251.248.10:2083 length 151

(60)   User-Name = '@cardiff.ac.uk'

(60)   EAP-Message = 0x020000130140636172646966662e61632e756b

(60)   Message-Authenticator = 0x5a83395b4186dfa649d51971c510ec2d

(60)   Trust-Router-COI := 'ligo.communities.moonshot.ja.net'

(60)   GSS-Acceptor-Realm-Name := 'astro.cardiff.ac.uk'

(60)   Event-Timestamp = 'Aug  6 2015 11:04:42 BST'

(60)   NAS-IP-Address = 10.73.1.254

(60)   Proxy-State = 0x30

Thread 5 waiting to be assigned a request

Waking up in 0.3 seconds.

Waking up in 0.1 seconds.

(60) Expecting proxy response no later than 29.499800 seconds from now

Waking up in 29.3 seconds.

Thread 4 got semaphore

Thread 4 handling request 60, (14 handled so far)

(60) Received Access-Reject Id 145 from 131.251.248.10:2083 to 131.251.248.14:51514 length 2

Sent Access-Request Id 243 from 131.251.248.14:41473 to 131.251.248.10:2083 length 184

(58)   User-Name = '@cardiff.ac.uk'

(58)   GSS-Acceptor-Service-Name = 'host'

(58)   GSS-Acceptor-Host-Name = 'gw005.astro.cf.ac.uk'

(58)   EAP-Message = 0x020700061500

(58)   State = 0x9de3aecd9be4bbf01fc6a26c830630ab

(58)   Message-Authenticator = 0x612cd57ba2b39f1a8a76deece934c20b

(58)   Trust-Router-COI := 'ligo.communities.moonshot.ja.net'

(58)   GSS-Acceptor-Realm-Name := 'astro.cardiff.ac.uk'

(58)   Event-Timestamp = 'Aug  6 2015 11:03:42 BST'

(58)   NAS-IP-Address = 131.251.184.56

(58)   Proxy-State = 0x30

Thread 3 waiting to be assigned a request

Waking up in 0.1 seconds.

(58) Received Access-Accept Id 243 from 131.251.248.10:2083 to 131.251.248.14:41473 length 835