Ryan Slominski via FreeIPA-users <freeipa-users(a)lists.fedorahosted.org>
writes:
[testuser@testclient1 ssh]$ ssh -vvv
testclient2.example.com
[snip]
debug1: Authentications that can continue:
publickey,gssapi-keyex,gssapi-with-mic,password,keyboard-interactive
debug3: start over, passed a different list
publickey,gssapi-keyex,gssapi-with-mic,password,keyboard-interactive
debug3: preferred gssapi-keyex,gssapi-with-mic,publickey,keyboard-interactive,password
debug3: authmethod_lookup gssapi-keyex
debug3: remaining preferred: gssapi-with-mic,publickey,keyboard-interactive,password
debug3: authmethod_is_enabled gssapi-keyex
debug1: Next authentication method: gssapi-keyex
debug1: No valid Key exchange context
This is kind of weird. Could you show KRB5_TRACE output for the ssh
command? (Separated out from the ssh CLI stream would be preferable.
Thanks,
--Robbie