[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
i cannot understand sshd behavior
- To: heimdal-discuss@sics.se
- Subject: i cannot understand sshd behavior
- From: "Gustavo Rios" <rios.gustavo@gmail.com>
- Date: Mon, 12 Mar 2007 13:22:08 -0300
- DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; b=ugln6x/5I/vLr2TqqwkV4cK2+4i7VxAbce5lnnUjEgrLfVdzZvVrTCyB6wsOt6oqsugp1T3sWp/qMHJs0VIGB5mBsAPtffpA9eTUMr15l5ubIoJPjpl8LgIhCYHoesOXXxNzlBh1w9LIRAGSrnv4D1TWI4zQ04VsRI7hvXQ/zZw=
- DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; b=nsQTcmhWfWDGZdzB5JHIZQ9a12D1cSkF8fDpgjneQrrOItdacUNE2Pb+QZIaYil3hxJX7iQB2MyO/AFKgXgs6Z2mDOO24ZbEEmrQS5JCw+0IuqPN1hfTUajWvdjhDa5mN8elgCLBuvQ6nFxAHjXk5Hey94HllOpmbvR04K8Drwg=
- Sender: owner-heimdal-discuss@sics.se
I have the following sshd_config (relevant part only):
GSSAPIAuthentication yes
#GSSAPICleanupCredentials yes
KerberosAuthentication yes
KerberosGetAFSToken yes
KerberosOrLocalPasswd yes
#KerberosTicketCleanup yes
When i try to connect to a server by its fqdn no password is request, like in:
$ ssh -l sioux foo.my.domain
Last login: Mon Mar 12 13:18:22 2007 from 10.0.0.250
Naeser's Law:
You can make it foolproof, but you can't make it
damnfoolproof.
$
But, when i try by IP, i get this:
$ ssh -l sioux 10.0.0.1
sioux@10.0.0.1's password:
Last login: Mon Mar 12 13:21:17 2007 from 10.0.0.250
"The subspace W inherits the other 8 properties of V. And there aren't
even any property taxes."
-- J. MacKay, Mathematics 134b
$
Why does it happens? I believe i told sshd explicitly not to request
password, didn't i?
Thanks in advance.